CMIS javscript same orgin policy problem

[leftright]

I can't use CMIS js API to access Alfresco because of same origin policy firebug gives me CORS 'Access-Control-Allow-Origin head missing error. Is there problem in CMIS js Api or do I need to enable on Alfresco Tomcat(I am using bundle) Cross-origin resource sharing. If the later is true, how can I do this?
Thank you for your answers

[mathias_lin]

I have a similar issue, see my posting on StackOverflow: http://stackoverflow.com/questions/31981648/angularjs-alfresco-cors-filter-issue-no-access-control-a...