For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jonathanw84's avatar
jonathanw84
Icon for Cirrus rankCirrus
May 12, 2022

CORS Question

Not too familiar with CORS (and I've looked over the implementation post), but can't seem to find the answer to my question. I have a VS that has a rewrite profile attached to it. All the URI rewrite...
application delivery
Kevin_Davies's avatar
Kevin_Davies
Icon for Nacreous rankNacreous
Jun 20, 2023

The destination has to provide the records that allow the access. If the domain of the calling webpage (the domain in the URL field of the users browser) is different to that of the destination website then CORS rules are required on the destination to allow the access or the browser itself will block it.

Be mindful that if these are API calls and you dont have authorisation to access them you may have an issue as they cannot perform authentication.