title: Why are audio files (MP3) blocked by CORS? What's the security risk?
body: <p>Why do I need to set Access-Control-Allow-Origin to <code>*</code> for an MP3 file so that it can be loaded by websites of other domains? What's the security risk with this?</p>
  
  <p>Or is it just to prevent other's from display content that you didn't authorize them to (assuming browsers support CORS)?</p>