Recent changes (likely <a class="issue-link js-issue-link" data-error-text="Failed to

it's not the content proxy that adds the 2nd header....: <div cl

CORS issue due to invalid access-control-allow-origin header about helix-content-proxy HOT 1 CLOSED

rofe commented on August 21, 2024

CORS issue due to invalid access-control-allow-origin header

from helix-content-proxy.

Comments (1)

tripodsan commented on August 21, 2024

it's not the content proxy that adds the 2nd header....:

helix-content-proxy/src/reverse.js

Lines 80 to 86 in f41655f

 if (ALLOWED_ORIGINS.find((pat) => pat.exec(origin))) { 

 log.info(`setting cors headers for origin: ${origin}`); 

 headers['Access-Control-Allow-Origin'] = origin; 

 headers['Access-Control-Allow-Methods'] = 'GET, HEAD, OPTIONS'; 

 } else { 

 log.info(`no cors headers for origin: ${origin}`); 

 }

I suggest you use universal runtime instead of adobe i/o:

$ curl -sD - 'https://helix-pages.anywhere.run/helix-services/content-proxy@v2?report=true&owner=adobe&repo=theblog&ref=master&path=/&lookup=https%3A%2F%2Fadobe.sharepoint.com%2F%3Ax%3A%2Fr%2Fsites%2FTheBlog%2F_layouts%2F15%2FDoc.aspx%3Fsourcedoc%3D%257BB20BA4A8-5040-40DA-A19C-BAD381543FB6%257D%26file%3Dredirects.xlsx%26action%3Ddefault%26mobileredirect%3Dtrue%26cid%3D5682fe56-f45b-4aeb-abd0-31583cdd6f4f' -H 'Origin: https://adobe.sharepoint.com'
HTTP/2 200
content-type: application/json
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: https://adobe.sharepoint.com

from helix-content-proxy.

Related Issues (20)

support delivery of sitemap.xml from onedrive / gdrive HOT 4
invalid sharelink gives 500 HOT 2
respond with `application/xml` for sitemap requests HOT 1
resolves with .lnk HOT 1
/helix-config.json virtual resource that aggregates all configs as JSON HOT 1
Getting error 500 with x-error: unexpected response: no headers HOT 1
Getting error 500: error: missing clientid. HOT 12
cleanup: remove calls to resolve-git-ref HOT 1
ensure that the fstab cache varies on GITHUB_TOKEN HOT 1
multi user support HOT 5
Segregate 429s by owner/repo HOT 1
Changes to reverse resolver break sidekick HOT 2
Add report feature to .lnk requests HOT 1
Add CORS headers to reverse lookup HOT 1
add support for zero-github-access
forward presignedStorageUrl to data providers HOT 1
remove query builder support HOT 1
An invalid fstab.yaml causes a 500, should be a 502 HOT 5
Dependency Dashboard

CORS issue due to invalid access-control-allow-origin header about helix-content-proxy HOT 1 CLOSED

Comments (1)

Related Issues (20)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

	if (ALLOWED_ORIGINS.find((pat) => pat.exec(origin))) {
	log.info(`setting cors headers for origin: ${origin}`);
	headers['Access-Control-Allow-Origin'] = origin;
	headers['Access-Control-Allow-Methods'] = 'GET, HEAD, OPTIONS';
	} else {
	log.info(`no cors headers for origin: ${origin}`);
	}