tree 0898427d9f12a6af51698202bf7ca2439d59eb26
parent 0c944766d97d5a0dc8fba4913d10585ded8f795a
author Dave Borowitz <dborowitz@google.com> 1365098556 -0700
committer Dave Borowitz <dborowitz@google.com> 1365099562 -0700

Set Access-Control-Allow-Origin: * on API requests

This allows scripts from arbitrary sites to access API endpoints, and
only if the requests are unauthenticated.

See also:
https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS

Change-Id: I3b356fad9337ec79e3f69d402f918d14841249a0