{"action":"created","issue":{"url":"https://api.github.com/repos/ipfs/go-ipfs/issues/1215","labels_url":"https://api.github.com/repos/ipfs/go-ipfs/issues/1215/labels{/name}","comments_url":"https://api.github.com/repos/ipfs/go-ipfs/issues/1215/comments","events_url":"https://api.github.com/repos/ipfs/go-ipfs/issues/1215/events","html_url":"https://github.com/ipfs/go-ipfs/pull/1215","id":74555713,"number":1215,"title":"Add CORS middleware handler to the API.","user":{"login":"NodeGuy","id":2148537,"avatar_url":"https://avatars.githubusercontent.com/u/2148537?v=3","gravatar_id":"","url":"https://api.github.com/users/NodeGuy","html_url":"https://github.com/NodeGuy","followers_url":"https://api.github.com/users/NodeGuy/followers","following_url":"https://api.github.com/users/NodeGuy/following{/other_user}","gists_url":"https://api.github.com/users/NodeGuy/gists{/gist_id}","starred_url":"https://api.github.com/users/NodeGuy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/NodeGuy/subscriptions","organizations_url":"https://api.github.com/users/NodeGuy/orgs","repos_url":"https://api.github.com/users/NodeGuy/repos","events_url":"https://api.github.com/users/NodeGuy/events{/privacy}","received_events_url":"https://api.github.com/users/NodeGuy/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-05-09T01:42:51Z","updated_at":"2015-06-22T01:46:22Z","closed_at":"2015-05-12T10:17:24Z","pull_request":{"url":"https://api.github.com/repos/ipfs/go-ipfs/pulls/1215","html_url":"https://github.com/ipfs/go-ipfs/pull/1215","diff_url":"https://github.com/ipfs/go-ipfs/pull/1215.diff","patch_url":"https://github.com/ipfs/go-ipfs/pull/1215.patch"},"body":"Fixes #1017 and #1049.\r\n"},"comment":{"url":"https://api.github.com/repos/ipfs/go-ipfs/issues/comments/113980488","html_url":"https://github.com/ipfs/go-ipfs/pull/1215#issuecomment-113980488","issue_url":"https://api.github.com/repos/ipfs/go-ipfs/issues/1215","id":113980488,"user":{"login":"jbenet","id":138401,"avatar_url":"https://avatars.githubusercontent.com/u/138401?v=3","gravatar_id":"","url":"https://api.github.com/users/jbenet","html_url":"https://github.com/jbenet","followers_url":"https://api.github.com/users/jbenet/followers","following_url":"https://api.github.com/users/jbenet/following{/other_user}","gists_url":"https://api.github.com/users/jbenet/gists{/gist_id}","starred_url":"https://api.github.com/users/jbenet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbenet/subscriptions","organizations_url":"https://api.github.com/users/jbenet/orgs","repos_url":"https://api.github.com/users/jbenet/repos","events_url":"https://api.github.com/users/jbenet/events{/privacy}","received_events_url":"https://api.github.com/users/jbenet/received_events","type":"User","site_admin":false},"created_at":"2015-06-22T01:46:22Z","updated_at":"2015-06-22T01:46:22Z","body":"cc @NodeGuy @krl @travisperson \r\n\r\nDo we want the same CORS header setup for the gateway? Or something else? what are all the relevant security concerns here?\r\n\r\n---\r\n\r\nSidenote: the origin problem is tangential, but separate. We hope to address that with [per-page suborigins](https://www.chromium.org/developers/design-documents/per-page-suborigins) once they land, using subdomains in the meantime.\r\n"}}