'Send CORS headers for cache poisoning reports.'

def OPTIONS_report_cache_poisoning(self):

    if ('Origin' not in request.headers):
        return
    origin = request.headers['Origin']
    parsed_origin = UrlParser(origin)
    if (not is_subdomain(parsed_origin.hostname, g.domain)):
        return
    response.headers['Access-Control-Allow-Origin'] = origin
    response.headers['Access-Control-Allow-Methods'] = 'POST'
    response.headers['Access-Control-Allow-Headers'] = 'Authorization,    X-Loggit,    '
    response.headers['Access-Control-Allow-Credentials'] = 'false'
    response.headers['Access-Control-Expose-Headers'] = self.COMMON_REDDIT_HEADERS
