1 using System.Web;
 2 using System.Web.Http.Filters;
 3 using System.Web.Mvc;
 4 
 5 namespace APIApplication
 6 {
 7     public class CrossSiteAttribute : System.Web.Http.Filters.ActionFilterAttribute
 8     {
 9         private const string Origin = "Origin";
10         /// <summary>
11         /// Access-Control-Allow-Origin是HTML5中定義的一種伺服器端返回Response header，用來解決資源（比如字型）的跨域許可權問題。
12         /// </summary>
13         private const string AccessControlAllowOrigin = "Access-Control-Allow-Origin" ;
14         /// <summary>
15         ///  originHeaderdefault的值可以使 URL 或 *，如果是 URL 則只會允許來自該 URL 的請求，* 則允許任何域的請求
16         /// </summary>
17         private const string originHeaderdefault = "http://192.168.13.7:8002" ;
18         /// <summary>
19         /// 該方法允許api支援跨域呼叫
20         /// </summary>
21         /// <param name="actionExecutedContext"> 初始化 System.Web.Http.Filters.HttpActionExecutedContext 類的新例項。</param>
22         public override void OnActionExecuted( HttpActionExecutedContext actionExecutedContext)
23         {
24             actionExecutedContext.Response.Headers.Add(AccessControlAllowOrigin, originHeaderdefault);
25         }
26     }
27 }