Access-Control-Allow-Origin

[DevZone]

+ всякие плюшки
{{{
        # Cross Origin Resource Sharing (CORS)
        add_header 'Access-Control-Allow-Origin'          
'http://developers.example.com,http://example.com';
        add_header 'Access-Control-Allow-Credentials'   'true';
        add_header 'Access-Control-Allow-Headers'      
'Content-Type,Accept';
        add_header 'Access-Control-Allow-Methods'       'GET, OPTIONS';
}}}

Posted at Nginx Forum: http://forum.nginx.org/read.php?21,216660,231802#msg-231802