Mail.ru: looch.tv CORS crossite user information and stream_key access

Incorrect CORS settings on api.looch.tv allowed crossite access to user information and stream key...