CorsCompilerPass.php

<?php

namespace Drupal\Core\DependencyInjection\Compiler;

use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
use Symfony\Component\DependencyInjection\ContainerBuilder;

/**
 * Provides a compiler pass which disables the CORS middleware in case disabled.
 *
 * @see core.services.yml
 */
class CorsCompilerPass implements CompilerPassInterface {
  
  /**
   * {@inheritdoc}
   */
  public function process(ContainerBuilder $container) : void {
    $enabled = FALSE;
    if ($cors_config = $container->getParameter('cors.config')) {
      $enabled = !empty($cors_config['enabled']);
    }
    // Remove the CORS middleware completely in case it was not enabled.
    if (!$enabled) {
      $container->removeDefinition('http_middleware.cors');
    }
  }

}