From f6305489dc76a41bc4bb1067ac9fc1571240a6ee Mon Sep 17 00:00:00 2001
From: Nat Lasseter <user@4574.co.uk>
Date: Mon, 31 Mar 2025 14:24:41 +0100
Subject: [Bracket API] bloody CORS

---
 cgi/user.cgi | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'cgi/user.cgi')

diff --git a/cgi/user.cgi b/cgi/user.cgi
index 535e580..c5cfb49 100755
--- a/cgi/user.cgi
+++ b/cgi/user.cgi
@@ -93,5 +93,8 @@ when /^\/stuff-i-want/
   page("Stuff I Want")
 when /^\/bracket-api/
   load "bracket-api.cgi"
-  $cgi.out("application/json") { $pdata }
+  $cgi.out({
+    type: "application/json",
+    "Access-Control-Allow-Origin": "https://dan.york.ac.uk/"
+  }) { $pdata }
 end
-- 
cgit v1.2.3