I have written a small rails app to serve up content to another site via xmlhttprequests that will be operating from another domain (it will not be possible to get them runn
Rails 3.1
class ApplicationController < ActionController::Base protect_from_forgery after_filter :set_access_control_headers def set_access_control_headers headers['Access-Control-Allow-Origin'] = '*' headers['Access-Control-Request-Method'] = '*' end end