gistfile1.txt

class ApplicationController

  after_filter :set_access_control_headers

  def set_access_control_headers

    # Any domain  
    # headers['Access-Control-Allow-Origin'] = '*' 

    # Specific domain
    allowed_domain = "http://" + request.domain
    headers['Access-Control-Allow-Origin'] = allowed_domain
    headers['Access-Control-Allow-Credentials'] = 'true'


    # headers['Access-Control-Allow-Methods'] = 'POST, GET, OPTIONS'
    # headers['Access-Control-Request-Method'] = '*'
  end

end