| commit | 06edb506e453f3cf3db75a7d91d3035adcc03290 | [log] [download] |
|---|---|---|
| author | Dave Borowitz <dborowitz@google.com> | Thu Apr 04 11:02:36 2013 -0700 |
| committer | Dave Borowitz <dborowitz@google.com> | Thu Apr 04 11:19:22 2013 -0700 |
| tree | 0898427d9f12a6af51698202bf7ca2439d59eb26 | |
| parent | 0c944766d97d5a0dc8fba4913d10585ded8f795a [diff] |
Set Access-Control-Allow-Origin: * on API requests This allows scripts from arbitrary sites to access API endpoints, and only if the requests are unauthenticated. See also: https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS Change-Id: I3b356fad9337ec79e3f69d402f918d14841249a0