D-Portal links not working from CDFD, elsewhere

[markbrough]

Brief Description
The links to D-Portal from CDFD are no longer working. They are of the form:
https://d-portal.iatistandard.org/savi/?aid=47045-LBR-M-CRS
https://d-portal.iatistandard.org/savi/?aid=SE-0-SE-6-10051

You can see them here (in the Activities table at the bottom of the page):
https://countrydata.iatistandard.org/data/recipient-country-or-region/LR/

NB we are using the same format of links from the Liberia Project Dashboard.

Severity
High

Issue Location
It looks like there is some kind of CORS error in the console (perhaps related to the change in URL from d-portal.org):

Access to fetch at 'https://d-portal.org/q.json?from=xson&root=/iati-activities/iati-activity&aid=47045-LBR-M-CRS' from origin 'https://d-portal.iatistandard.org' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

[xriss]

I think this should be fixed now, needed CORS headers for the actual redirect.

Although I think there may be a some extra dumb security situations where a wildcard domain is not allowed so may still cause problems.