sgammon/apptools — Issue #9: Add HTTP baseHeader for Cross Origin Resource Sharing (CORS)
Author: sgammon
Created: 2012-01-11 19:06:37+00:00
State: open
Labels: api, core

Add the `Access-Control-Allow-Origin: *` header to Python/AppTools HTTP responses by default, which allows JavaScript served by the local site to access data/scripts from any origin.

Also:
--Make this configurable in project.py
--Research the security impact of making this on-by-default