尝试发送Javascript资产时出现InvalidCrossOriginRequest

I'm trying to create an "asset controller" shim which will filter static asset requests so only authorized users can get retrieve certain assets. I wanted to continue to use the asset pipeline so I setup a route like thisI'm trying to create an "asset controller" shim