Applies to Product - Dynamics 365 Commerce
What’s happening?
Access to XMLHttpRequest from a specific origin has been blocked by CORS policy, resulting in an error message indicating that the request to the Retail Server API is being denied.
Reason:
The underlying cause of this is that the server does not include the 'Access-Control-Allow-Origin' header in its response, which is necessary for allowing requests from different origins.
Resolution:
- Update the CORS settings for the e-commerce site in the Retail Server's web.config file to include the specific origin in the 'AllowedOrigins' setting. This can be done by appending the new URL or value to the existing value, separated by a valid separator.
- For detailed instructions on modifying the settings, refer to the documentation provided: How to make configuration changes to RCSU.