Translations:Manual:CORS/15/en

For anonymous requests, $origin query string parameter can be set to  which will allow requests from anywhere.