private static CorsBasedSecurityMessageHandler CreateSubjectUnderTest( HttpResponseMessage response = null, CorsEngine corsEngine = null, CorsOptions options = null) { var sut = new CorsBasedSecurityMessageHandler(options ?? CorsOptions.AllowAll()); sut.InnerHandler = new TestHandler(response); sut.SetCorsEngineFactory(() => corsEngine ?? new CorsEngine()); return(sut); }