Attachments, CORS, and the CDN

[randomairborne]

Hey! I was using a browser to play around with attachments and attachment URLs, and I noticed that some types of attachments seem to have permissive cors (mostly images which is very useful) and others (text files) have no CORS headers at all. I was wondering if this could be documented somewhere, if it isn't already and i've just missed it several times? Thank you!