h5bp/html5-boilerplate — comment on commit 2727fa23a6715080f120fd41792a6a8c1b112125
File:  line 0
By daneden:

@mathiasbynens tbh, I've found myself enabling access-control-allow-origin a lot more than disabling it (read: I've enver disabled it) and I'm sure it's the case for most users. Default is and should be the most common case.