I want to solve the One Minute Man Challenge with JavaScript and AJAX. But the Service don't allow CORS-Request. Is it possible to add the Access-Control-Allow-Headers : * in the Response or did I miss something?

Or is it not intended, to use browser scripting, than it's fine too.
Thanks,
spaeg