Access-Control-Allow-Origin Header with Cloudfront

Question

Hi Fam,

In project i am working right now, developer run a vulnerability in frontend application. then there is some vulnerability regarding  **Access-Control-Allow-Origin:**  this header  now contain value as *, the vulnerability checked SW says its a vulnerability issue. the  solution it gives,  to add the domain to this header.

anyone has faced this earlier please help me to solve this.

I have tried with cloudfront but it didnt work.

Thank You.

Answer

Hello.

Are there any other response header policies set in CloudFront?  
Will setting "Access-Control-Allow-Origin" in the response header policy solve the problem?  
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/creating-response-headers-policies.html

Answer

Hi,

This guidance proposes solutions to your problem: https://repost.aws/knowledge-center/no-access-control-allow-origin-error

Best,

Didier

Access-Control-Allow-Origin Header with Cloudfront

Relevant content