request->server['HTTP_ORIGIN'])) { $response->addHeader('Access-Control-Allow-Origin', $this->request->server['HTTP_ORIGIN']); } else { $response->addHeader('Access-Control-Allow-Origin', '*'); } } return parent::afterController($controller, $methodName, $response); } }