Allow CORS and CORP Headers, Enabling SharedArrayBuffer

lib/command.coffee

@@ -86,6 +86,20 @@ runner = ->
       required: false,
       value: true
     }
+    {
+      short: "cp"
+      long: "corp"
+      description: "Enable CORP Header with cross-origin",
+      require: false,
+      value: true
+    }
+    {
+      short: "cs"
+      long: "cors"
+      description: "Enable CORS Header for all or specific origins",
+      require: false,
+      value: true
+    }
   ]
 
   opts.parse(options.reverse(), args,  true)

lib/livereload.coffee

@@ -218,9 +218,19 @@ class Server extends EventEmitter
     @server.close()
 
 exports.createServer = (config = {}, callback) ->
+
+  headers = {
+    'Content-Type': 'application/javascript'
+  }
+  if config?.corp
+    headers['Cross-Origin-Resource-Policy'] = 'cross-origin'
+  if config?.cors
+    headers['Access-Control-Allow-Origin'] = if typeof config.cors is 'string' then config.cors else '*'
+    headers['Access-Control-Allow-Methods'] = 'OPTIONS, HEAD, GET, POST'
+
   requestHandler = ( req, res )->
     if url.parse(req.url).pathname is '/livereload.js'
-      res.writeHead(200, {'Content-Type': 'text/javascript'})
+      res.writeHead(200, headers)
       res.end fs.readFileSync require.resolve 'livereload-js'
   if !config.https?
     app = http.createServer requestHandler