update sql api: XMLHttpRequest header

applications/katrin/controllers/api.py

@@ -103,6 +103,8 @@ def sql():
     if request.extension == 'html':
         request.extension = 'json'
     response.view = 'generic.'+request.extension
+    if request.env.http_origin:
+        response.headers['Access-Control-Allow-Origin'] = '*'
     def GET(*args, **kargs):
         if len(args) == 0:
             redirect('sqlinfo')