CORS policy issue on plugin

🆘 Support
1

Hi,

We have legacy plugins from https://datocms-plugin-folder.friflyt.no and version 2 plugins from https://datocms-plugins.friflyt.no.

On our record edit page the legacy plugin is not loading with the below message on the console:

Access to fetch at ‘https://site-api.datocms.com/docs/site-api-hyperschema.json’ from origin ‘https://datocms-plugin-folder.friflyt.no’ has been blocked by CORS policy: The ‘Access-Control-Allow-Origin’ header has a value ‘https://datocms-plugins.friflyt.no’ that is not equal to the supplied origin. Have the server send the header with a valid value, or, if an opaque response serves your needs, set the request’s mode to ‘no-cors’ to fetch the resource with CORS disabled.

Do you have any suggestion on this?

Thanks,
Jyotirmoy Biswas

2

Hello @jyoti

If you manage those endpoints you can change the response headers to allow all Origins.
You can read on how to do this here: Access-Control-Allow-Origin - HTTP | MDN

3

Ok. Thanks for your feedback.

Thanks again,
Jyotirmoy Biswas