Questions tagged [cors]

Cross-Origin Resource Sharing (CORS) is a specification that enables open access across domain-boundaries

A mechanism to enable client-side cross-origin requests. Specifications that enable an API to make cross-origin requests to resources can use the algorithms defined by this specification. If such an API is used on http://example.org resources, a resource on http://hello-world.example can opt in using the mechanism described by this specification (e.g., specifying Access-Control-Allow-Origin: http://example.org as response header), which would allow that resource to be fetched cross-origin from http://example.org.

http://www.w3.org/TR/cors/

140 questions
1
vote
1 answer

Adding subdomains in haproxy for CORS

I want to do the equivalent of this in haproxy to allow CORS for any server in my domain. By default CORS only does null, star or a single URL. Is that possible? SetEnvIf Origin "^(.*\.bebop\.co)$" ORIGIN_SUB_DOMAIN=$1 Header set…
Trimbee
  • 33
  • 1
  • 7
1
vote
1 answer

Appending an argument to request_uri for mobile subdomain on nginx

I'm running a multilingual wiki (MediaWiki 1.26.2 with MobileFrontend) on nginx 1.9.3/OpenBSD 5.8. For each language wiki, I have a separate MediaWiki installation folder and a subdomain like en.domain.com pointing to that folder. I'd like to add a…
Till Kraemer
  • 15
  • 1
  • 6
1
vote
1 answer

Using URL Rewrite and ARR for redirecting to same server

The scenario: A web server running a single site under two different addresses: www.mysite.com (regular site) ws1.mysite.com (web services) Both are accessible via HTTPS, and both are running on the same application (whether it's a web service…
MPelletier
  • 51
  • 10
1
vote
1 answer

Error while setting up grafana with graphite and nginx

While trying to setup grafana with graphite using nginx server. I am getting this error: No 'Access-Control-Allow-Origin' header is present on the requested resource. I tried changing configuration file but still not working my grafana configuration…
1
vote
1 answer

How can I add basic auth to an apache proxy while using CORS headers?

Background I use grafana for displaying graphs of our server-metrics. Grafana is a JS-app which in our case is getting the data from graphite and storing search-queries in elasticsearch. All three services have their own vhost, although being on the…
1
vote
0 answers

Disable CORS using kubernetes ingress

Is it possible to forcefully disable CORS using kubernetes nginx ingress when the application is allowing CORS? I have an application that I believe is sending Access-Control-Allow-Credentials:true header. I tried the following but its not…
Dushyant Bangal
  • 123
  • 1
  • 7
1
vote
0 answers

CloudFront CORS request using signed cookies and withCredentials, not sending back Access-Control-Allow-Credentials unless I include some extra header

I'm having a very strange issue that I can't seem to crack. I configured a private CloudFront distribution to serve content from a private S3 bucket. I am using signed cookies to grant access to the files. I am also making cross origin requests…
1
vote
0 answers

CORS is not working NGINX + DJANGO + REACT application

Existing nginx configuration given bellow. I tried in multiple way but nothing is working. server { server_name backend.xxxxxx.com www.backend.xxxxxx.com; client_max_body_size 100M; #add_header Access-Control-Allow-Origin *; …
Ariful Islam
  • 113
  • 4
1
vote
0 answers

Angular application CORS issues using Nginx

My Angular application is unable to make requests to my backend. This is the Nginx configuration server { listen 0.0.0.0:443 ssl; listen [::]:443 ssl; server_name my.site.io; ssl_certificate /etc/nginx/certificates/my.site.io.crt; …
1
vote
0 answers

Nginx Reverse Proxy 403 Errors on POST Requests

I'm trying to set up a stack of services in Docker: Unifi, PHP, Nginx, and Certbot, where Unifi and PHP are the backend services and Nginx serves them in reverse proxy mode, while Certbot runs periodically to get SSL certs for Nginx. I have it…
1
vote
1 answer

AWS Cloudfront CORS trouble with font files

I have a Javascript application that is delivered to the browser from a CloudFront endpoint. All static files of the application are hosted in an S3 bucket. That involves a whole bunch of javascript and css files, as well as some font files. The…
UncleBob
  • 227
  • 2
  • 11
1
vote
0 answers

NGINX Cors allow origin not match origin

I have a big problem in my website. Since i moved from Apache webserver to Nginx the ads in my site are not working. I added these lines in my website config file in nginx: add_header 'Access-Control-Allow-Origin' '*' always; add_header…
Svg Lev
  • 11
  • 1
1
vote
1 answer

Enable CORS in a specific folder with dot in directory name

I am trying to enable CORS in a specific file (stellar.toml) located at mydomain.com/.well-known/stellar.toml I added the below catch all and allow for testing in my .htaccess file on my litespeed/wordpress site: Access-Control-Allow-Origin: * If I…
Sajal Dutta
  • 613
  • 5
  • 18
1
vote
0 answers

Why doesn't CORS apply? in gcp app-engine

I am trying to post marvin JS on the site. There is no problem with the iframe and the function itself, but a problem occurs when using additional functions. When the current page is executed, the following message appears. [Error] SecurityError:…
조형식
  • 11
  • 1
1
vote
0 answers

CORS and Preflight problems while making api calls

I have some CORS and preflight problems with my software I can't solve. To test it I was ursing a cors test site to simulate it. When I make an api request to my server application I get the following error: Access to XMLHttpRequest at…
TmCrafz
  • 129
  • 7