MW API CORS for *

Hi everybody,

 

Lea recently asked about CORS support for the MW API, which we currently
have disabled (that's the MW default value).

 

It can be set to allow every external domain, there's even a blacklist to
deny specific domains.

 

Lea and me are in favor of allowing access for every domain. Any strong
opinions?

 

 

-fro