Post-Proxy-Flow-Hook-Sample.xml

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<SharedFlow name="default">
    <Step>
        <Name>OPTIONS-CORS-Headers-Response</Name>
        <Condition>(response.header.Access-Control-Allow-Origin = null)</Condition>
    </Step>
</SharedFlow>