http.cors.md

Cross-Origin Resource Sharing

Access-Control-Allow-Origin

This field indicates whether a resource can be shared based by returning the value of the Origin:

Access-Control-Allow-Origin: *
Access-Control-Allow-Origin: http://foo.com http://bar.com

Access-Control-Allow-Credentials

Access-Control-Expose-Headers

Access-Control-Max-Age

Access-Control-Allow-Methods

Access-Control-Allow-Headers

Access-Control-Request-Method

Access-Control-Request-Headers