1136 enable more cors

[michbarsinai]

RFI Checklist

Before submitting the pull request, fill out sections (1.) Related Issues and (2.) Pull Request Checklist.

1. Related Issues

• Connects to API: Consistently use CORS (Cross-Origin Resource Sharing) headers such a "Access-Control-Allow-Origin" #1136 Consistently use CORS

---

2. Pull Request Checklist

• Functionality completed as described in FRD
• Dependencies, risks, assumptions in FRD addressed
• Unit tests completed
• Deployment requirements identified (e.g., SQL scripts, indexing)
• Documentation completed
• All code checkins completed

---

3. Review Checklist

After the pull request has been submitted, fill out this section.

• Code review completed or waived
• Testing requirements completed
• Usability testing completed or waived
• Support testing completed or waived
• Merged with develop branch and resolved conflicts

[michbarsinai]

Testing this PR:

1. Re-create the user guide
2. For each endpoint in the native api that has a CORS label next to it, validate that the response headers contain Access-Control-Allow-Origin with the value *
3. Other endpoints should not have this header
4. It might also make sense to have other people validate my choice of CORS-allowed endpoints, in case I've missed something.

[coveralls]

Coverage increased (+0.04%) to 8.728% when pulling 44f4936 on 1136-enable-more-CORS into 52e9ec3 on develop.

[coveralls]

Coverage increased (+0.07%) to 8.76% when pulling fdb7035 on 1136-enable-more-CORS into 52e9ec3 on develop.

[coveralls]

Coverage increased (+0.07%) to 8.76% when pulling 575acd7 on 1136-enable-more-CORS into 52e9ec3 on develop.