Enabling Cross-Origin Resource Sharing (CORS)

Cross-Origin Resource Sharing (CORS) allows web browsers to request resources from a different domain than the one the web application is running on. For example, an application on https://example.com can request resources from https://example-2.com if CORS is properly enabled.

Important Considerations

• If using HTTPS, ensure all servers have valid and trusted SSL certificates.
• Some browsers, like Firefox, will block cross-origin requests if the SSL certificate is invalid, even if CORS is enabled correctly.

How to Enable CORS

1. Open or create the .htaccess file in the directory where you want to allow cross-origin requests.
2. Add the following line to the .htaccess file:

Header set Access-Control-Allow-Origin "*"

• Using "*" allows requests from any origin.
• For more restrictive access, replace "*" with the specific domain(s) you want to allow.

More Information

For detailed guidance on CORS, visit MDN Web Docs: CORS.