Fixes CVE-2020-25032. From Wen Heping (thanks!)
A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. ok kn@