When trying the recon endpoint https://commonsreconcile.toolforge.org/en/api with the testbench https://reconciliation-api.github.io/testbench/, we notice that the service does not support CORS.
The CORS headers should be returned as specified by the specs: https://reconciliation-api.github.io/specs/latest/