app

var CorsFilter = func(c *revel.Controller, fc []revel.Filter) {
	if c.Request.Method == "OPTIONS" {
		c.Response.Out.Header().Add("Access-Control-Allow-Methods", strings.Join(c.Request.Header["Access-Control-Request-Method"], ","))
		c.Response.Out.Header().Add("Access-Control-Allow-Headers", strings.Join(c.Request.Header["Access-Control-Request-Headers"], ","))
		c.Response.Out.Header().Add("Access-Control-Allow-Origin", strings.Join(c.Request.Header["Origin"], ","))
		c.Response.Out.Header().Add("Access-Control-Allow-Credentials", "true")
		c.RenderJson("{foo}")
	} else {
		fc[0](c, fc[1:])
	}
}

var HeaderFilter = func(c *revel.Controller, fc []revel.Filter) {

	c.Response.Out.Header().Add("X-Frame-Options", "SAMEORIGIN")
	c.Response.Out.Header().Add("X-XSS-Protection", "1; mode=block")
	c.Response.Out.Header().Add("X-Content-Type-Options", "nosniff")
	c.Response.Out.Header().Add("Access-Control-Allow-Origin", strings.Join(c.Request.Header["Origin"], ","))
	c.Response.Out.Header().Add("Access-Control-Allow-Credentials", "true")

	fc[0](c, fc[1:])
}