CORS support for logos?

[matteo-s]

Is it possible to add support for CORS to the view serving the logos?
(Example: http://cie-provider.org:8002/static/svg/logo-cie.svg).
When the RP fetches the metadata in order to leverage the logo declared by the OP for its UI it has to download it somewhere and then serve it to the frontend, with all the complexity deriving from having to keep a local copy in sync.
With CORS support the RP could directly use the remote image as-is for its UI.

I don't know if this is something in line with specs, and probably there are security issues involved, so feel free to close it at will.

[peppelinux]

cors can be enabled in django

please consider that the RP doesn't make any use of the provider's logo, it only provide the logo URI in a UI, then it's the user-agent fetching the logo