[openstreetmap/openstreetmap-website] Missing CORS header for /trace/*/data endpoint (#3252)

[mmd]

User on Slack reported, that they cannot download gpx traces from osm.org website when using iD editor: https://ideditor.netlify.app/#background=EsriWorldImagery&disable_features=boundaries&gpx=https://www.openstreetmap.org/trace/2788683/data

Error message: 
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://www.openstreetmap.org/trace/2788683/data. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).

This seems like a valid use case to me.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/3252
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20210706/62ae184d/attachment.htm>