CORS origins take http://localhost:* for pages that run from any local port, such as a Shop Mini

cors.origins in settings.ib.ts accepts http://localhost:*, so an app can be the backend of a Shop Mini, which calls from localhost on a port of its own in the Shop app as well as in development. The new parcel-globe example is one: a web app that verifies Shop's buyer tokens, keeps each buyer's parcels and draws them on a globe.