Update to allow CORS as API on revision actions

Author: jackycute

lib/response.js

@@ -335,6 +335,13 @@ function actionRevision(req, res, note) {
                 if (!content) {
                     return response.errorNotFound(res);
                 }
+                res.set({
+                    'Access-Control-Allow-Origin': '*', //allow CORS as API
+                    'Access-Control-Allow-Headers': 'Range',
+                    'Access-Control-Expose-Headers': 'Cache-Control, Content-Encoding, Content-Range',
+                    'Cache-Control': 'private', // only cache by client
+                    'X-Robots-Tag': 'noindex, nofollow' // prevent crawling
+                });
                 res.send(content);
             });
         } else {
@@ -349,6 +356,13 @@ function actionRevision(req, res, note) {
             var out = {
                 revision: data
             };
+            res.set({
+                'Access-Control-Allow-Origin': '*', //allow CORS as API
+                'Access-Control-Allow-Headers': 'Range',
+                'Access-Control-Expose-Headers': 'Cache-Control, Content-Encoding, Content-Range',
+                'Cache-Control': 'private', // only cache by client
+                'X-Robots-Tag': 'noindex, nofollow' // prevent crawling
+            });
             res.send(out);
         });
     }