Enabling CORS with Access-Control-Allow-Origin: *

[Jonathon Bellew]

Hi,

Is there any possibility that you could add the necessary CORS HTTP headers to the API responses (chiefly, Access-Control-Allow-Origin: *), so that JS clients can access the API directly?

Cheers. 

[Brandon Keepers]

Hi Jonathan,

This is on our radar to do soon. We just need to tighten up security before allow cross origin requests like CORS or jsonp.

=b

[František Hába]

+1