android - Javascript Testing Webservice Locally - CORS -

i'm attempting build jquery mobile application locally connect website via xmlhttprequest/xcrf/json. when attempting connect website following error:

xmlhttprequest cannot load http://wwws.mydomain.com/rest/system/connect.  wildcard '*' cannot used in 'access-control-allow-origin' header when credentials flag true.  origin 'http://localhost' therefore not allowed access. 

i'm enabled cors on webserver (mydomain.com) per cors documentation:

header set access-control-allow-origin "*" 

how can test webservice outside of website? when converted android app have similar problems?

this part of security, cannot that. if want allow credentials access-control-allow-origin must not use *.

check out these thread: cross origin resource sharing credentials