I have a wordpress page using ajax (a room booking system), and also a wordpress subdomain which is pointing to the page.
The main section of the page will not load
headers are best sent out from the server itself. So if you are using apache you'd need to tell apache to send that header ideally.
http://enable-cors.org/server_apache.html