Similar to #3192, CORS headers should be added to /f endpoint for source link redirect.