[catshirt]

irrelevant really- you can't set the CORS header on a remote API you don't own.

[aidanfeldman]

that's kind of the point. CORS just tells the browser to block the response, so this proxies the request and simply changes the headers to avoid that restriction.