CORS headers and filter out short keywords