Return no result with disallowed for CORS response, not an error

packages/server/src/utils/XSS.ts

@@ -31,7 +31,7 @@ export function getCorsOptions(): any {
             if (!origin || allowedOrigins == '*' || allowedOrigins.indexOf(origin) !== -1) {
                 callback(null, true)
             } else {
-                callback(new Error('Not allowed by CORS'))
+                callback(null, false)
             }
         }
     }