self.response.headers.add_header('Access-Control-Allow-Origin', '*')
self.response.headers['Content-Type'] = 'text/csv'
self.response.out.write(self.dump_csv())
Enable CORS in google app engine blobstore downloader