Tornado: Set CORS headers for every controller (use origin with * for dev environment and for internal services behind firewall)

tornado-cors-all.py

import tornado.web

#
# Created for Anarchist movement
#
# http://iwa-ait.org
# http://zsp.net.pl
#

class BaseHandler(tornado.web.RequestHandler):
    def data_received(self, chunk):
        pass

    def set_default_headers(self):
        self.set_header("Access-Control-Allow-Origin", "*")
        self.set_header("Access-Control-Allow-Headers", "x-requested-with")
        self.set_header('Access-Control-Allow-Methods', 'POST, PUT, GET, OPTIONS, DELETE')