Overpass now has dedicated bucket

Add CORS busting direct link in HEAD tag
Curse you FF and your font security policy