Shape contributed at ctx.cors.
ctx.cors
The resolved `Access-Control-Allow-Origin`, or `null` when not allowed.