Same origin policy

I noticed that the production version updated the CORS setting to restrict the access of "testplans" and test objects to only speedtest.xfinity.com. Is it possible to relax this restriction for research purpose?

Review the production CORS configuration that restricts testplans and test objects to speedtest.xfinity.com. Determine which research origins would need access and document the security and scope requirements before proposing a change; the issue does not name a file, test, or agreed definition of done.

Written by the indexing model from the issue text.