<p>Do you think it would make sense to narrow the Access-Control-Allow-Origin domains instead of just putting "*"?</p>

            <p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">
              —<br>
              Reply to this email directly or <a href='https://github.com/openstreetmap/openstreetmap-website/pull/138#issuecomment-9647532'>view it on GitHub</a>.
            </p>
            <img src='https://github.com/notifications/beacon/uTRSc6ihLa7Shf84BpiOpmLWAu4oQih75mggZl1E8_nNfp_iEXETdQVsjYwMcApp.gif' height='1' width='1'>