Cross-Origin Resource Sharing on Rails

cors.rb

def cross_site_sharing
  headers['Access-Control-Allow-Origin'] = '*'
  headers['Access-Control-Request-Method'] = 'POST, OPTIONS'
  headers['Access-Control-Allow-Headers'] = 'X-Requested-With'
  headers['Access-Control-Max-Age'] = '1278000'
  headers['Content-Length'] = '0'
  headers['Content-Type'] = 'text/plain'
  render nothing: true, status: 200
end

## in 'routes.rb'

match '(your_path)', to: '(controller)#cross_site_sharing', via: :options