Modify getObject CORP header to use cross-origin policy

[jujaga]

Description

There are use cases where COMS is being used as a way to directly reference and embed content into a 3rd-party webpage. The default helmet CORP policy of same-origin was too restrictive for this specific endpoint.

https://apps.nrs.gov.bc.ca/int/jira/browse/SHOWCASE-3509

Types of changes

Bug fix (non-breaking change which fixes an issue)

Checklist

• [x] I have read the CONTRIBUTING doc
• [x] I have checked that unit tests pass locally with my changes
• [x] I have added tests that prove my fix is effective or that my feature works
• [x] I have added necessary documentation (if appropriate)

Further comments

[github-actions[bot]]

Coverage Report

Totals
Statements:	59.6% ( 2802 / 4701 )
Methods:	50% ( 319 / 638 )
Lines:	66.34% ( 1685 / 2540 )
Branches:	52.4% ( 798 / 1523 )

[codeclimate[bot]]

Code Climate has analyzed commit dc254b91 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 66.3% (0.0% change).

View more on Code Climate.