No CORS enabled for public characters

First off, not sure which subforum to post this in. Saw this one as the best fit.

According to this link, PoE supports CORS.
However, when requesting a public characters data via
GET https://www.pathofexile.com/character-window/get-items?character=XXX&accountName=XXX
the result is sent back without a 'Access-Control-Allow-Origin'-Header, making modern browsers reject cross site requests.

As this is public data, such policy does not make any sense.
Would it be possible, that this header gets added?