12

when I will add data to the database using the function, and on the server I have added Access-Control-Allow-Origin so that it is not blocked by CORS, but still error when I looked in the browser console tools tab console

Access to XMLHttpRequest at 'https://int.goo.id/api/pg/sso.register' from origin 'http://127.0.0.1:8080' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

how to deactivate CORS??

OceanL
  • 389
  • 1
  • 2
  • 14
  • 1
    I think you can't. You have to configure your server to add CORS header Access-Control-Allow-Origin: : – Dariusz Bacinski Sep 03 '19 at 19:34
  • I have added it on the server but only 2 functions to the database are blocked by cors namely the function to insert data – OceanL Sep 04 '19 at 03:10
  • See also https://stackoverflow.com/questions/60191683/xmlhttprequest-error-in-flutter-web-enabling-cors-aws-api-gateway/65858677#65858677 – Suragch Jan 23 '21 at 11:32

4 Answers4

3

For enabling cors on my server and to resolve XMLHttpRequest error in flutter web

I am using this in my .htaccess file for allowing access to certain domains only

 <ifModule mod_headers.c>
    SetEnvIf Origin "http(s)?://(localhost:25120|domain.com|domain2.com)$" AccessControlAllowOrigin=$0
    Header add Access-Control-Allow-Origin %{AccessControlAllowOrigin}e env=AccessControlAllowOrigin
    Header always set Access-Control-Allow-Methods: "GET,POST,OPTIONS,DELETE,PUT"
 </ifModule>    
Vicky Salunkhe
  • 4,955
  • 2
  • 30
  • 42
1

For anyone who is using node.js server, enable cors support in your server side code.

  1. npm i cors express
  2. In index.js or server.js -
const express = require("express");

const app = express();
var cors = require("cors");
app.use(cors()); 

This should fix cors issue with flutter web

0

if you have experienced something like that, and the server has added Access-Control-Allow-Origin but is still blocked by CORS, try checking the function (if you use the function to CRUD with postrgresql) because my problem is solved when I fix the function

OceanL
  • 389
  • 1
  • 2
  • 14
0

Disabling CORS policy on Chrome is a temporary solution. It's just frustrating that you have to manually call it before starting Chrome every. single. time. Disable same origin policy in Chrome

Binh Phan
  • 69
  • 6