diff --git a/TODO b/TODO
index 451f787b3..297cfedae 100644
--- a/TODO
+++ b/TODO
@@ -2,6 +2,8 @@ Blobserver:
 
 [?] Get App Engine blob server up to parity (brett)
 [ ] range request tests, fleshing out (upstream to Gо?)
+[ ] add CROS support:
+    http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
 
 Android: