cors

application_controller.rb

class ApplicationController < ActionController::Base
  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
  protect_from_forgery with: :exception

  after_action :cors

  layout false

  def cors
    headers['Access-Control-Allow-Origin'] = '*'
  end

  def vast
    render file: "public/vast"
  end

  def wrapper
    send_file "public/YuMeVPAIDWrapper.swf", type: 'application/x-shockwave-flash', disposition: 'inline'
  end
end