fix!: disable server.cors
by default for security reasons
#4399
+49
−17
server.cors
by default for security reasons
#4399