Access-Control-Allow-Origin header not added

NyouB

Hi,
The Access-Control-Allow-Origin header are set to * in the settings menu but I don't see the header when I make a request to the api. I can see others headers so why not this one?

Any idea ?

Thanks

Ivorzk

me too !

julian

@ivorzk @NyouB

The logic behind the ACAO header in NodeBB does not allow *, you must explicitly specify domains, comma separated.

mana

@julian
I have not been able to play videos on my website, I confirm that there should be no bugs in the plugin writing,plugin is
nodebb-plugin-dplayer2.

https://nodebb-cn.top/topic/3/test

Since I upgraded from version 1.14.3, I cannot use 1.6.0 now
It can be used in version 1.14.3

Access to video at 'https://vfx.mtime.cn/Video/2019/03/19/mp4/190319212559089721.mp4' from origin 'https://nodebb-cn.top' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I set it up like this

I don't understand, it may be a problem with my settings, but I have tried many times since it failed, but unfortunately it doesn't work

PitaJ

@mana access control allow origin cannot be a wildcard *

mana

@pitaj Is it trying to revoke?
I want to ask what should I do, thank you very much

I try many but no player
Access-Control-Allow-Origin Regular Expression
(http|ftp|https)://[\w-]+(.[\w-]+)+([\w-.,@?^=%&:/~+#]*[\w-@?^=%&/~+#])?

I would like to ask how to fill in, the question really troubled me for too long, thank you very much

PitaJ

@mana looking back at your original question, I think you're misunderstanding how that header works.

Your browser is refusing to load the mp4 file because the source site (vfx.mtime.cn) doesn't have a permissive Access-Control-Allow-Origin header. I don't think it has anything to do with your forum's ACAO header.