Don't do any CORS checking on Embed API requests
Don't do any CORS checking on Embed API requests

This allows users to embed site content from any domain,
which is a common use case for the Embed API.

rtfd/readthedocs.org,rtfd/readthedocs.org,rtfd/readthedocs.org,rtfd/readthedocs.org