anchor.diff:          ?_assertEqual("true",
               header(Headers1, "Access-Control-Allow-Credentials"))
       ].
  +
  +split_list(S) ->
  +    re:split(S, "\\s*,\\s*", [trim, {return, list}]).
  
positive.code:         ?_assertEqual(?DEFAULT_ORIGIN,
              header(Headers1, "Access-Control-Allow-Origin")),
          ?_assertEqual(string_headers(?SUPPORTED_METHODS),
              header(Headers1, "Access-Control-Allow-Methods"))
      ].
  
  
  
negative.code:         ]}}
      ].
  
  custom_cors_config() ->
      [
          {<<"enable_cors">>, true},
          {<<"allow_methods">>, ?CUSTOM_SUPPORTED_METHODS},
          {<<"allow_headers">>, ?CUSTOM_SUPPORTED_HEADERS},
          {<<"exposed_headers">>, ?CUSTOM_EXPOSED_HEADERS},
          {<<"origins">>, {[
              {<<"*">>, {[]}}
          ]}}
      ].
  
  access_control_cors_config(AllowCredentials) ->
      [
  