Avoid Allow-Control-Allow-Origin for async loaded txt/js files stored in S3 Cloud Storage
<p>I'm using a python app in the Swisscom Application Cloud based on Cloudfoundry.
The app creates txt and js files which are stored in s3 (dynstrg) to ensure availability.</p>

<p>I'm trying to load the data of these files async, but I get a "XHTMLRequest cannot load" error as the headers "Allow-Control-Allow-Origin" are not set and are on a different host. S3 is on sth like <a href="https://ds31s3.swisscom.com/" rel="nofollow">https://ds31s3.swisscom.com/</a>... the app on https://.scapp-corp.swisscom.com/</p>

<p>Is there a way I can set these headers for the dynstrg service somehow in the manifest.yml or alike?</p>