I basically need to enable Cross-Origin in my Tomcat 8.5. I want to know the right way to do this and what are the risks?