API: Allow cross-origin requests to "status" service

[benfitita 39]

"status" API service is publicly available, no API key is needed. For example:

curl https://airvpn.org/api/?format=json&service=status

It'd be great if a permissive CORS header would be included in a response allowing any origin to access "status" API service. For example:

Access-Control-Allow-Origin: *

Further down the road, it'd useful to be able to say which origins are allowed to send requests with my API key, so it could be used for more advanced services cross-origin.

 

Background info

I'm working on my own config generator and I'd like to run it in a web browser.

 

Workaround

I can use https://cors-anywhere.herokuapp.com/ and such for the time being.