diff --git a/tokenpluginfile.php b/tokenpluginfile.php
index 22449ad414d5f..18d67af1ecf00 100644
--- a/tokenpluginfile.php
+++ b/tokenpluginfile.php
@@ -31,6 +31,9 @@
 
 require_once('config.php');
 
+// Allow CORS requests.
+header('Access-Control-Allow-Origin: *');
+
 $relativepath = get_file_argument();
 $token = optional_param('token', '', PARAM_ALPHANUM);
 if (0 == strpos($relativepath, '/token/')) {