String origin = filterContext.HttpContext.Request.Headers["Origin"];
filterContext.HttpContext.Response.AppendHeader("Access-Control-Allow-Origin", "*");//設置允許跨域
filterContext.HttpContext.Response.AppendHeader("Access-Control-Allow-Methods", "POST,GET,OPTIONS,DELETE");
filterContext.HttpContext.Response.AppendHeader("Access-Control-Max-Age", "3600");
filterContext.HttpContext.Response.AppendHeader("Access-Control-Allow-Headers", "x-requested-with,content-type");//設置允許跨域
filterContext.HttpContext.Response.AppendHeader("Access-Control-Allow-Credentials", "true");