Enable CORS for ext resources

[anselmh]

Currently Cross Origin Requests are being blocked in Firefox (and partially in Chrome) due to the lack of a CORS rule. I don’t know any external resources but I guess this affects:

• Google Webfonts
• jQuery(?)
• SizerSoze JS API?

EDIT: This blocks displaying the JSON results in Firefox (using Nightly, but guess it’s also for v29)

Firefox log:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://themes.googleusercontent.com/static/fonts/lato/v7/Kom15zUm24dIPfIRiNogNuvvDin1pK8aKteLpeZ5c0A.woff. This can be fixed by moving the resource to the same domain or enabling CORS.