Hi!
We are currently working on adding CORS support to AeroGear-Controller and are trying to decide how this is best configured, using CDI or by using web.xml.
You can find details in this gist with examples of both options here: https://gist.github.com/4066691
Let us know what your preferences are.
Regards,
/Daniel
+1 stay true to using CDI consistently