CORS header ‘Access-Control-Allow-Origin’ missing in google app engine php runtime 72

Question

I am getting this error while making ajax calls,

"Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://example.com/request?action=ajax. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing)

i googled for sorting this error and found a suggestion for to change my app.yaml configuration. I am using this in my app.yaml

handlers:

Serve a directory as a static resource.

• url: /Web static_dir: Web http_headers: Access-Control-Allow-Origin: "https://www.example.com"

Serve all url requests.

• url: /.* script: auto secure: always http_headers: Access-Control-Allow-Origin: "*"

but getting a deployment error,

An error occurred while parsing file: [/home/] Unexpected attribute "http_headers" for mapping type script. in "/home//app.yaml", line 19, column 1