set Access-Control-Allow-Origin: * response header for downloads.lede-project.org

[Daniel Golle]

Hi!

To allow 3rd-party scripts (such as luci-app-attendedsysupgrade) to
download images from downloads.lede-project.org it would be great to
have the Access-Control-Allow-Origin response header[1] set to allow
cross-origin resource sharing (ie. set it to '*').
If there is no good reason against that, it would be great if someone
with administrative access to our web servers could make sure the
header is present at least for GET requests to files from
downloads.lede-project.org.


Cheers


Daniel


[1]: https://www.w3.org/TR/cors/#access-control-allow-origin-response-header