f56a46eb52
@@ -0,0 +1,3 @@
Access-Control-Allow-Origin: "*"
Access-Control-Allow-Headers: "origin, x-requested-with, content-type"
Access-Control-Allow-Methods: "PUT, GET, POST, DELETE, OPTIONS"
The note is not visible to the blocked user.