Access to XMLHttpRequest has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource

Question

Using Sitecore 9.1 Trying to get FXM working and seeing the Cors policy error (which I thought I had fixed previously but nevermind).

I have set the AllowedOrigins domains in a patch file.

I also tried updating the web.config to include the verbs:

I had also tried to tie this into a location element but this just caused the server to 500 error.

<location path="sitecore/api/ssc/Beacon/Service/beacon">
      <system.web>
          <httpProtocol>
              <customHeaders>
                  <add name="Access-Control-Allow-Headers" value="Origin, X-Requested-With, Content-Type, Accept" />
                  <add name="Access-Control-Allow-Methods" value="POST,GET" />
              </customHeaders>
          </httpProtocol>
      </system.web>
  </location>

Am struggling to find any documentation on adding these methods so hopefully, I've just done something wrong with that aspect.

Answer 1

Turns out that the WAF was blocking the tracking request due to triggering OWASP rules. Updating that configuration made the Cors exception go away! So I did not have to modify the methods from what I had posted above.

Answer 2

I am facing the same issue it is because I am enabling CORS from webconfig and I cannot remove it because we are using 3rd party libraries in Sitecore JSS it is working fine but on the Controller level in the Action Method it is not working it through the same error so I added this above my action method

 [EnableCors(origins: "*", headers: "Content-Type", methods: "GET,POST")]