In .htaccess I put it as shown below. But I keep getting an error.
Access to XMLHttpRequest at ‘https:…’ from origin ‘https://…’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.
Header set Access-Control-Allow-Origin "*"
Header set Access-Control-Allow-Origin "PUT, POST, DELETE, GET, OPTIONS"
Header set Access-Control-Allow-Origin "Accept, Authorization, Content-Type"
RewriteEngine On
Options All -Indexes
# ROUTER WWW Redirect.
RewriteCond %{HTTP_HOST} !^www. [NC]
RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# ROUTER HTTPS Redirect
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# ROUTER URL Rewrite
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteCond %{SCRIPT_FILENAME} !-d
RewriteRule ^(.*)$ index.php?route=/$1 [L,QSA]
Advertisement
Answer
You can only have one Allow origin header so the last one is interpreted.
Header set Access-Control-Allow-Origin "*" Header set Access-Control-Allow-Methods "PUT, POST, DELETE, GET, OPTIONS" Header set Access-Control-Allow-Headers "Accept, Authorization, Content-Type"