[[headers]]
  for = "/*"
  [headers.values]
    # NB: This is potentially dangerous, but I don't think we have much other choice:
    Access-Control-Allow-Origin = "*"