fixes #3350

app/controllers/application_controller.rb

@@ -13,6 +13,7 @@ class ApplicationController < ActionController::Base
   layout "default"
   force_ssl :if => :ssl_login?
   helper_method :show_moderation_notice?
+  before_filter :enable_cors
 
   rescue_from Exception, :with => :rescue_exception
   rescue_from User::PrivilegeError, :with => :access_denied

app/controllers/posts_controller.rb

@@ -1,7 +1,6 @@
 class PostsController < ApplicationController
   before_filter :member_only, :except => [:show, :show_seq, :index, :home, :random]
   before_filter :builder_only, :only => [:copy_notes]
-  before_filter :enable_cors, :only => [:index, :show]
   respond_to :html, :xml, :json
 
   def index