diff --git a/app/controllers/publics_controller.rb b/app/controllers/publics_controller.rb
index a497085705c275012daa075bdb80be392f9a645f..1c73ac0fb93dfbb7fd6b4bc2274bd665615f2f48 100644
--- a/app/controllers/publics_controller.rb
+++ b/app/controllers/publics_controller.rb
@@ -10,6 +10,11 @@ class PublicsController < ApplicationController
   skip_before_filter :set_invites
   skip_before_filter :which_action_and_user
   skip_before_filter :set_grammatical_gender
+  before_filter :allow_cross_origin, :only => [:hcard, :host_meta, :webfinger]
+
+  def allow_cross_origin
+    headers["Access-Control-Allow-Origin"] = "*"
+  end
 
   layout false
   caches_page :host_meta