Allow CORS?

Hi there

It would be great if this htsget server supportted CORS!

That way javascript based code running in the browser can fetch it

For instance here https://www.test-cors.org/#?client_method=GET&client_credentials=false&server_url=https%3A%2F%2Fhtsget.ga4gh.org%2Freads%2Fgiab.NA12878.NIST7035.1%3Fclass%3Dheader&server_enable=true&server_status=200&server_credentials=false&server_tabs=remote

This returns a HTTP Status 0 which indicates a cors error basically, can also look in the javascript console on that page

Also I looked at #8 while trying to find htsget servers to test against, currently I have only tested against a dnanexus server but they all have a biut different behavior so great to see others

Start by reproducing the HTTP Status 0 result with the linked test-cors.org check against the htsget reads URL, then inspect the server's request and response entry points. Done means browser-based JavaScript can fetch the endpoint without a CORS error; verify the behavior in the browser console and with the referenced test page.

Written by the indexing model from the issue text.