export default () => { return (req, callback) => { const corsOptions = { origin: true } if (/^localhost$/m.test(req.headers.origin)) corsOptions.origin = false callback(null, corsOptions) } }