function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
Manindar NManindar N 

I'm facing CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Hi Experts,

I'm facing below issue while I'm accessing my local website(remote site) to Salesforce application. Assume like https://mystie.com(remote website or localwebsite). I'm trying to make an AJAX call to Salesforce and that gets blocked.

Access to manifest at 'https://hr-mysite.my.salesforce.com/visualforce/session?url=https%3A%2F%2Fhr-mysite--fhcm2.um5.visual.force.com%2Fresource%2F1595939225000%2Ffhcm2__collaborationportal%2Fmanifest.json' (redirected from 'https://hr-mysite--fhcm2.um5.visual.force.com/resource/1595939225000/fhcm2__collaborationportal/manifest.json') from origin 'https://hr-mysite--fhcm2.um5.visual.force.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Plesae refer Salesforce landing page console error.

Landing page console issue.

Above image if i do clockin post request will come but here post request gets blocked( All are Ajax call). i attached falid request screenshot.

Post request get failed inside salesforce application.
Note: Its was working fine end to end apllication  
AnudeepAnudeep (Salesforce Developers) 
CORS does not support requests for unauthenticated resources, including OAuth endpoints. 

I recommend adding a blocked URL to SFDC’s CORS whitelist

If whitelisting does not help, you can try adding the header "Access-Control-Allow-Origin" to the request you forward to the salesforce

Reference Articles:
-------------------------
https://developer.salesforce.com/forums/?id=9060G000000I7mfQAC
  
xhr.setRequestHeader("Access-Control-Allow-Origin", "*");

http://https://salesforce.stackexchange.com/questions/137172/possible-to-set-access-control-allow-origin-in-an-sfmc-landingpage
  
<script runat=server>
Platform.Load("core","1");
HTTPHeader.SetValue("Access-Control-Allow-Methods","POST");
HTTPHeader.SetValue("Access-Control-Allow-Origin","*");
</script>

If you find this information helpful, please mark this answer as Best. It may help others in the community. Thank you
Talha SaqibTalha Saqib
Please try the following resource: https://retrology.net/how-to-fix-no-access-control-allow-origin-header-is-present-on-the-requested-resource-error-in-apex-salesforce/
RyanAtTGHRyanAtTGH
I found success by NOT using a wildcard in the CORS allow list, but instead, two static URLS:
- https://tgh.llc
- https://www.tgh.llc

Depending on where your code is hosted could determine which static URL(s) to use.