Enable CORS headers from assets on live