CORS on ColdFusion

If you don't have access to configure you web server, you can still send the header from a ColdFusion script. It's a case of adding the following to your ColdFusion scripts:

Tag Based File

<cfheader name="Access-Control-Allow-Origin" value="*">

Script Based File

cfheader( name="Access-Control-Allow-Origin", value="*");

var response = getPageContext().getResponse();
response.setHeader("Access-Control-Allow-Origin","*");

Note: This needs to be set before any output has been sent from the server.