Ruby on Rails Controller - Allow Origin Header

gistfile1.rb

class ApplicationController < ActionController::Base
  before_filter :cors_set_access_control_header
  
  # other staff
  
private
  def cors_set_access_control_header
    headers['Access-Control-Allow-Origin'] = '*'
    headers['Access-Control-Allow-Methods'] = 'POST, PUT, DELETE, GET, OPTIONS'
    headers['Access-Control-Request-Method'] = '*'
    headers['Access-Control-Allow-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Authorization'
  end
end