You can do this from the ols config. A quick Google search of enable cors openlitespeed should be enlightening.
However there isn't persistent ols config yet so an update can wipe out the config. A cronjob can solve this. Search this forum for a guide on that.
The roadmap has persistent config feature for this year I believe.
