CORS demo Simple CORS demo HelloWorld HelloWorldServlet HelloWorld /cors-resource.html CORS com.thetransactioncompany.cors.CORSFilter cors.allowGenericHttpRequests true cors.allowOrigin * cors.allowSubdomains false cors.supportedMethods GET, HEAD, POST, OPTIONS cors.supportedHeaders Content-Type, X-Requested-With cors.exposedHeaders X-Test-1, X-Test-2 cors.supportsCredentials true cors.maxAge 3600 CORS /cors-resource.html