Cordova docs are related to the Widget Access specification, which states:
Zero or more access elements can be added to the configuration file. When multiple authorization elements are used by the author, the set of allowed network connections is the union of all access requests submitted by the user agent.
In other words, just include a few elements:
<access origin="http://example.net"/> <access origin="http://another_example.net"/>