gistfile1.txt

FilterRegistration.Dynamic reg = getServletConfig().getServletContext().addFilter("CORS Filter", "org.ebaysf.web.cors.CORSFilter");
    reg.addMappingForUrlPatterns(EnumSet.of(DispatcherType.REQUEST), false, "/*");
    reg.setInitParameters(new HashMap<String, String>() {{
      put("cors.allowed.origins", "http://localhost:3449");
      put("cors.allowed.headers", "Origin,Accept,X-Requested-With,Content-Type,Access-Control-Request-Method,Access-Control-Request-Headers,Cookie");
      put("cors.exposed.headers", "Set-Cookie");
    }});