title: Allow Many Origins in EnableCors()
body: <p>I have a MVC web API with GET method called GetNames.</p>
  
  <p>When I want to call myapi.com/controller/GetNames from AJAX in another website, I am getting <code>Access-Control-Allow-Origin</code> error. </p>
  
  <p>So In my MVC Web API Code, </p>
  
  <p>I added this in my WebApiConfig:</p>
  
  <pre><code>  config.EnableCors();
  </code></pre>
  
  <p>And I added this to my Controller method:</p>
  
  <pre><code>[HttpGet]
  [EnableCors(origins: "http://mywebsite.net", headers: "*", methods: "*")]
  public string GetNames(string requestKey)
  </code></pre>
  
  <p>What if many websites are calling this method?</p>
  
  <p>I want to allow <strong>many</strong> origins, and even better if I can allow <strong>all origins</strong>, not just defined ones.</p>