server_coldfusion.html

---
layout: default
title: enable cross-origin resource sharing
---

	<div class="container">
		<section>
			<h1>CORS on ColdFusion</h1>

			<p>
				If you don't have access to configure you web server, you can still send the header from a ColdFusion script. It's a case of adding the following to your ColdFusion scripts:
			</p>
			<h2>Tag Based File</h2>
			<pre class="code">&lt;cfheader name="Access-Control-Allow-Origin" value="*"&gt;</pre>
			<h2>Script Based File</h2>
			<pre class="code">cfheader( name="Access-Control-Allow-Origin", value="*");</pre>
			<br>
			Or for versions of ColdFusion prior to 11:
			<pre class="code">var response = getPageContext().getResponse();
response.setHeader("Access-Control-Allow-Origin","*");</pre>
			<p class="note">
				Note: This needs to be set before any output has been sent from the server.
			</p>

		</section>
	</div>