Enabling Cross-Origin Requests with CORS Settings
Cross-origin resource sharing (CORS) is a new standard introduced in HTML 5 that allows web applications to use HTTP headers to specify which origins are permitted to request resources on the server. Modern web browsers will consult the Access-Control-Allow-Origin header on how to relax the same origin policy for a given page. By default, this setting was disabled starting version 1.5.0SR1 due to security vulnerability concerns. However, CORS can be enabled for certain or all domains by editing the
file (located in
To modify cross-origin request permissions:
- Log out of Zoomdata, if you are still in the program and close the browser.
- From your terminal, open a command line session.
- Connect to your Zoomdataserver via a command prompt.
Use the following command to access and open the
zoomdata.propertiesfile:vi /etc/zoomdata/zoomdata.propertiesIf the .properties file does not exist, this command creates the file.
Add the following variable into the file on a new line:
<origin1> with your specific URI including
https as appropriate. Use
* as a wildcard instead of a specific origin, thereby allowing any origin to access the resource, keeping in mind that this is a potential security vulnerability and may not work with all browsers. Refer to your Tomcat documentation to verify the appropriate syntax to use.
Save the document using the standard
Restart Zoomdata services after making this change and also make sure to clear your browser cache.