Issue #1869548 by dawehner, jeqq, dmouse, slasher13, damiankloip, alexpott, nod_, AlxVallejo, chr.fritsch, yanniboi, effulgentsia, dixon_, -enzo-, Wim Leers, Crell, andypost, catch, Damien Tournoud, kim.pepper, linclark: Opt-in CORS support

Revert "Issue #1869548 by dawehner, jeqq, dmouse, damiankloip, nod_, AlxVallejo, chr.fritsch, yanniboi, effulgentsia, dixon_, -enzo-, Wim Leers, Crell, Damien Tournoud, andypost, kim.pepper, linclark, catch: Opt-in CORS support"

This reverts commit f2b71152.

Issue #1869548 by dawehner, jeqq, dmouse, damiankloip, nod_, AlxVallejo, chr.fritsch, yanniboi, effulgentsia, dixon_, -enzo-, Wim Leers, Crell, Damien Tournoud, andypost, kim.pepper, linclark, catch: Opt-in CORS support

Issue #2527126 by Wim Leers, dawehner, effulgentsia, anavarre, janusman, Fabianx, alexpott, hass, catch, Berdir, znerol: Only send X-Drupal-Cache-Tags and -Contexts headers when developer explicitly enables them

Issue #2543332 by Wim Leers, effulgentsia, Fabianx, Crell, dawehner, borisson_: Auto-placeholdering for #lazy_builder without bubbling

Issue #2529514 by dawehner, Fabianx, Wim Leers: Replace system.filter::protocols with container parameters

Issue #2493033 by Berdir, Wim Leers, lauriii, Fabianx, effulgentsia, dawehner, catch, msonnabaum, Crell, webchick: Make 'user.permissions' a required cache context

Issue #2491155 by mikeburrelljr, Mac_Weber, opdavies: Update drupal.org and kernel.org URLs in core modules (Follow-up to 2489912)

Issue #2453059 by Wim Leers: Set default render cache contexts: 'theme' + 'languages:' . LanguageInterface::TYPE_INTERFACE

Issue #2347877 by znerol, Berdir: Move DrupalKernel::initializeCookieGlobals() into a SessionConfiguration service

Issue #2251113 by alexpott, damiankloip, Crell, Wim Leers, dawehner, sun: Use container parameters instead of settings.