Overcoming Cross Site Scripting issue with Node Apps

app.js

// initialize app
function start(app, express) {
	app.use(express.favicon(__dirname + '/public/images/favicon.ico'));		//set favicon
	
	var allowCrossDomain = function(req, res, next) {
	    res.header('Access-Control-Allow-Origin', '*');
	    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS');
	    res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization, x-requested-with, X-Titanium-Id');
	    res.header('Access-Control-Allow-Credentials', 'true');
	    next();
	};
	app.use(allowCrossDomain);
}

// release resources
function stop() {
	
}