title: Access-Control Origin HTTP header on WSO2 ESB Out
body: <p>How do I set custom HTTP headers on an ESB proxy service Out Sequence? I'm trying to set "Access-Control-Allow-Origin" to allow my javascript/html front-end page to be able to GET the XML that is provided by this service. I also need to add a Cache-Control.</p>
  
  <p>If there is a way to do this directly on my WSO2 Data Services Server (DSS), that would be preferable as it would avoid adding an ESB server to my process. According to this forum post from about a year ago, it's not possible: <a href="http://wso2.org/forum/thread/13991" rel="nofollow">http://wso2.org/forum/thread/13991</a></p>
  
  <p>I've tried it several ways, but looking at fiddler, the header is unchanged:</p>
  
  <pre><code>HTTP/1.1 200 OK
  Content-Type: text/html;charset=ISO-8859-1
  Content-Length: 637
  Date: Wed, 28 Mar 2012 20:58:31 GMT
  Server: WSO2 Carbon Server
  </code></pre>
  
  <p>I'm somewhat new with WSO2 servers (more of a front-end dev), so the answer could be right in front of me.</p>