Adds CORS headers for developement

[magsout]

@karlcow it ok on production but on developement not.

[karlcow]

@magsout This should be working now

[magsout]

@karlcow still same message and error

[karlcow]

hmm weird

→ http HEAD https://webcompat-metrics-staging.herokuapp.com/data/needsdiagnosis-timeline

Or is it when you test locally? aka not hosted.

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://webcompat.github.io
Connection: keep-alive
Content-Length: 108434
Content-Type: application/json
Date: Thu, 21 Jun 2018 20:10:30 GMT
Server: gunicorn/19.8.1
Vary: Origin
Via: 1.1 vegur

Access-Control-Allow-Origin: https://webcompat.github.io this tells to accept only from webcompat.github.io.

[magsout]

@karlcow

Or is it when you test locally? aka not hosted.

Yes, exactly :(

[magsout]

http://localhost:3001/?from=2018-05-21&to=2018-06-21

[karlcow]

so indeed there are two ways to solve this:

• to change to allow all domains with *
• to use a proxy server which changes the value on the fly.

Let me add *

[karlcow]

Pull request in the pipe #32