'No CORS headers should be set (or even checked) by default'

def test_default_set_cors_headers(self):

    trans = self._new_trans(allowed_origin_hostnames=None)
    self.assertTrue(isinstance(trans, Webapp.GalaxyWebTransaction))
    trans.request.headers['Origin'] = 'http://lisaskelprecipes.pinterest.com?id=kelpcake'
    trans.set_cors_headers()
    self.assert_cors_header_missing(trans.response.headers)
