Two servers (not the client) should send the following headers:
- Access-Control-Allow-Origin: choose which source can call the server
- Access-Control-Allow-Methods: a method that is allowed to access the resource (GET or POST)
- Access-Control-Max-Age: how long the cache is stored
, ( Firebug ), Cross Source.
, -, . , .
, CORS , .