(v24) The Cross-Origin Request Blocked Error

The Cross-Origin Request Blocked Error

This applies to: Visual Data Discovery

Cross-origin resource sharing (CORS) is a new standard introduced in HTML 5 that allows web applications to use HTTP headers to specify which origins are permitted to request resources on the server. Modern web browsers will consult the Access-Control-Allow-Origin header on how to relax the same origin policy for a given page.

By default, this setting was disabled starting version 1.5.0SR1 due to security vulnerability concerns. However, CORS can be enabled for certain or all domains through the zoomdata.conf ( /etc/zoomdata ) file. Please add the following parameter:

access.control.allow.origin=*

The * will open CORS for all domains. If you want to specify specific domains, replace the * with the appropriate domain name. Refer to your Tomcat documentation to verify the appropriate syntax to use.

Please restart Symphony server after making this change and also make sure to clear your browser cache.