CORS isn’t just for XHR | Hacker News Reader