TryGhost/Ghost — pull request #4663 by adamcooke (2014-12-17 08:59:55+00:00)
Title: Add CORS headers to the RSS feed

This PR adds cross origin headers to the RSS feed thus allowing it to be accessible by other webpages which wish to pull the feed using AJAX. This is useful if you want to include the latest X posts from your blog on an external site.

There are no particular security concerns to be worried about here as it only allows the `GET` method and nothing in the `rss` action changes any data.