mozilla/openbadges — pull request #97 by brianloveswords (2012-03-23 19:45:01+00:00)
Title: 96 remove universal cors

We had `Access-Control-Allow-Origin: *` going through on every request, which is a potential security vulnerability. I've modified it so only whitelisted URLs get the CORS header.