library/Benri/Controller/Plugin/CORS.php
public function postDispatch(Zend_Controller_Request_Abstract $request)
    {
        $methods  = implode(', ', array_unique($this->_methods));
        $headers  = implode(', ', array_unique($this->_headers));

        if ($this->_credentials) {
            header('Access-Control-Allow-Credentials: true', true);
        }

        header("Access-Control-Allow-Origin: {$this->_origin}", true);
        header("Access-Control-Allow-Methods: {$methods}", true);
        header("Access-Control-Allow-Headers: {$headers}", true);
        header("Access-Control-Max-Age: {$this->_maxAge}", true);
        header('X-XSS-Protection: 1; mode=block', true);
        header('X-Frame-Options: SAMEORIGIN', true);
    }
public function postDispatch(Zend_Controller_Request_Abstract $request)
    {
        $methods  = implode(', ', array_unique($this->_methods));
        $headers  = implode(', ', array_unique($this->_headers));

        if ($this->_credentials) {
            header('Access-Control-Allow-Credentials: true', true);
        }

        header("Access-Control-Allow-Origin: {$this->_origin}", true);
        header("Access-Control-Allow-Methods: {$methods}", true);
        header("Access-Control-Allow-Headers: {$headers}", true);
        header("Access-Control-Max-Age: {$this->_maxAge}", true);
        header('X-XSS-Protection: 1; mode=block', true);
        header('X-Frame-Options: SAMEORIGIN', true);
    }
Called after an action is dispatched by Zend_Controller_Dispatcher.

@internal
@param Zend_Controller_Request_Abstract $request
@see http://framework.zend.com/manual/1.12/en/zend.controller.request.html Zend_Controller_Request_Abstract