Driving CORS through attributes at the controller level in C#.

While, yes, you may do this at a method, you may also do the following at the controller level for all the verb methods.

[EnableCors(origins: "*", headers: "*", methods: "*")]
public class MyController : ApiController
{