Package: qa.debian.org Severity: wishlist User: qa.debian.org@packages.debian.org Usertags: debsources Hi, I think it would make sense to enable CORS on requests to /api. Otherwise the API is of no use to anything but debsources itself and non-browser clients. More info at: http://enable-cors.org/ Cheers, -- Raphael Geissert - Debian Developer www.debian.org - get.debian.net