LockerProject/Locker — Issue #853: GET of api.singly.com/:token/push is missing CORS headers
Author: beaugunderson
Created: 2012-02-22 21:50:45+00:00
State: open

```
XMLHttpRequest cannot load https://api.singly.com/[censored]/push.

Origin http://beaugunderson.com is not allowed by Access-Control-Allow-Origin.
```

Previously `/push` returned valid CORS headers.

This is what's needed:

```
res.header("Access-Control-Allow-Origin", "*");
res.header("Access-Control-Allow-Headers", "X-Requested-With");
```