Cross-Origin Resource Sharing Specification

http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter

  CorsFilter
  org.apache.catalina.filters.CorsFilter
  
    cors.allowed.origins
    *
  
  
    cors.allowed.methods
    GET,POST,HEAD,OPTIONS,PUT
  
  
    cors.allowed.headers
    Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers
  
  
    cors.exposed.headers
    Access-Control-Allow-Origin,Access-Control-Allow-Credentials
  
  
    cors.support.credentials
    true
  
  
    cors.preflight.maxage
    10
  


  CorsFilter
  /*