asp.net core controller with enable cors attribute

publiccontroller.cs

[ApiController]
[Route("api/[controller]")]
[Produces("application/json")]
[AllowAnonymous]
[EnableCors(CORSPolicies.PublicApi)]
public class PublicApiControllerBase : ControllerBase
{
  [DisableCors]
  [HttpGet]
  public ActionResult<IEnumerable<string>> Get()
  {
    return new string[] { "hello", ".net Core 3.1" };
  }
}