allowed CORS for /dumps

index.js

@@ -26,7 +26,7 @@ app.use(bodyParser.urlencoded({
 
 // serve only *.xhtml documents
 app.use('/docs', function(req, res, next){
-  res.set('Access-Control-Allow-Origin', 'http://localhost:3000');
+  res.set('Access-Control-Allow-Origin', '*');
   if(req.path.endsWith('.xhtml')){
     next();
   } else {
@@ -35,6 +35,7 @@ app.use('/docs', function(req, res, next){
 }, express.static('docs/'));
 
 app.post('/dumps/', function(req, res, next){
+  res.set('Access-Control-Allow-Origin', '*');
   // read post data from the body
   var post_data = req.body || {};
   var id, doc;
@@ -72,6 +73,7 @@ app.post('/dumps/', function(req, res, next){
 });
 
 app.use('/dumps', function(req, res, next){
+  
   if(req.path.endsWith('.xhtml')){
     next();
   } else {
@@ -93,7 +95,7 @@ app.get('/get_task', function(req, res){
   // get a mode
   var mode = ['annotate', 'review'][Math.random() > 0.5 ? 0 : 1]
 
-  res.set('Access-Control-Allow-Origin', 'http://localhost:3000');
+  res.set('Access-Control-Allow-Origin', '*');
 
   // TODO: Serve a proper document and result
   res.jsonp({