code: public function postDispatch(Zend_Controller_Request_Abstract $request)
      {
          $methods  = implode(', ', array_unique($this->_methods));
          $headers  = implode(', ', array_unique($this->_headers));
  
          if ($this->_credentials) {
              header('Access-Control-Allow-Credentials: true', true);
          }
  
          header("Access-Control-Allow-Origin: {$this->_origin}", true);
          header("Access-Control-Allow-Methods: {$methods}", true);
          header("Access-Control-Allow-Headers: {$headers}", true);
          header("Access-Control-Max-Age: {$this->_maxAge}", true);
          header('X-XSS-Protection: 1; mode=block', true);
          header('X-Frame-Options: SAMEORIGIN', true);
      }
docs: Called after an action is dispatched by Zend_Controller_Dispatcher.
  
  @internal
  @param Zend_Controller_Request_Abstract $request
  @see http://framework.zend.com/manual/1.12/en/zend.controller.request.html Zend_Controller_Request_Abstract