public Map
HttpServletResponse response = (HttpServletResponse)res;
response.addHeader("Access-Control-Allow-Origin", "*");
response.addHeader("Access-Control-Allow-Methods", "POST,GET,PUT,DELETE,OPTIONS");
response.addHeader("Access-Control-Allow-Credentials", "true");
response.addHeader("Access-Control-Allow-Headers", "Content-Type,X-Requested-With,token");
response.addHeader("Access-Control-Max-Age", "600000");
//TODO
...
}
这样就支持跨域了，但是这种方式不怎么安全，"Access-Control-Allow-Origin"后面的*代表支持所有域名。
