12
votes
1answer
231 views

Support Cross-Origin Resource Sharing

Currently, the only way to call the API from javascript is to use JSONP, but this can be cumbersome and has security issues. If the following header was included in all API responses, the API could be ...