WebCORS API, to fix CORS

We have WebUSB, which asks you for permission. Why not have WebCORS, which asks you for permission?

ACAO stuff would still work but websites would be able to override things by doing webcors.requestPermission(“example.org”) or even webcors.requestPermission(“example.org”, “cookies”)