MW API CORS for *

Hi everybody,

 

Lea recently asked about CORS support for the MW API, which we currently
have disabled (that's the MW default value).

 

It can be set to allow every external ___domain, there's even a blacklist to
deny specific domains.

 

Lea and me are in favor of allowing access for every ___domain. Any strong
opinions?

 

 

-fro