CORS header `undefined` error when trying to load avatars of @buddycloud.org users from different origin

[martin-hewitt]

Error is:

Image from origin 'https://demo.buddycloud.org' has been blocked from loading by Cross-Origin Resource Sharing policy: The 'Access-Control-Allow-Origin' header contains the invalid value 'undefined'. Origin 'https://my.domain.com' is therefore not allowed access. 

[imaginator]

The original design of the media server was to point requests to other media servers - and not transfer data twice.

This was to avoid the overhead of a scenario where user@tv-series.com posts game-of-thrones-s01e01-1GB.mpg to game-of-thrones@tv-series.com, don't make the API server of other-server.com pull the data for follower@other-server.com