Investigate CORS for the API

[Omertron]

Will YAMJ v3 support Cross-Origin Resource Sharing by setting the Access-Control-Allow-Origin header, so web-apps (such as iSkin2) can read the responses of the AJAX calls made to the API even if they weren't loaded from the same IP address and port as the API?

http://en.wikipedia.org/wiki/Cross-origin_resource_sharing

The easiest would be set the value of the header to *, but you could be more specific than that if you want, even make it configurable.

Another possibility would be to serve the web-apps themselves through the API, so the AJAX request would satisfy the same-origin policy.

[jluc2808]

priority 3