The Access-Control-Allow-Origin header will be set to the client's origin if the beginning of the client's origin matches the value you provide.
Access-Control-Allow-Origin