title: Get around: No 'Access-Control-Allow-Origin' header is present on the requested resource
body: <p>I have to deal with a RESTful server which is not under my control. When I try to fetch the ID 1 record from it this is the error I get:</p>
  
  <pre><code>XMLHttpRequest cannot load http://www.example.com/api/v1/companies/1.
  No 'Access-Control-Allow-Origin' header is present on the requested 
  resource. Origin 'http://localhost:4200' is therefore not allowed 
  access.
  </code></pre>
  
  <p>I can <code>curl</code> it on the shell:</p>
  
  <pre><code>$ curl -I http://www.company.com/api/v1/companies/1
  HTTP/1.1 200 OK
  Cache-Control: private
  Content-Length: 11055
  Content-Type: application/javascript
  Last-Modified: Thu, 18 Jun 2015 07:30:26 GMT
  Accept-Ranges: bytes
  ETag: "5e772a598a9d01:0"
  P3P: policyref="/w3c/p3p.xml",CP="CAO DSP LAW CURa ADMa DEVa CUSi OUR LEG UNI"
  Date: Fri, 19 Jun 2015 13:06:46 GMT
  $
  </code></pre>
  
  <p>I use the following contentSecurityPolicy:</p>
  
  <pre><code>contentSecurityPolicy: {
    'default-src': "'none'",
    'script-src': "'self'",
    'font-src': "'self'",
    'connect-src': "'self' http://www.example.com",
    'img-src': "'self'",
    'style-src': "'self'",
    'media-src': "'self'"
  }
  </code></pre>
  
  <p>How can I fix this? How can I tell Ember to just use it?</p>