Use CORS for getting project contents