The new version of Guillotine comes with configurable support for CORS headers (default: enabled). This means you no longer have to inject your own CORS headers if your frontend needs to fetch data from the Guillotine API on a different domain.
Release notes can be found here.