Add list config to add additional domains for CORS headers:
The workaround so far was to use randomport_allowlisted_origins.
However, this opens/offers much more than we want.