CORS blocking requests to the API

[arcogabbo]

Requests on every endpoint of the API are blocked from the browser (currently using Chrome 93).

Example:

$.ajax({
 url:'https://api.opensource.org/licenses/',
 method:'get',
 success:(res)=>{
 console.log(res)
 },
 error:(xhr,s,err)=>{
 console.error(err)
 }
})

Output:

Access to XMLHttpRequest at 'https://api.opensource.org/licenses/' from origin 'null' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

[webmink]

Sounds like something @paultag should look at.