CORS Error in Ajax Requests

Hi there,

First of all, thank you for the great work you guys put into crafting this plugin.

Secondly, we have faced an issue when we started using this plugin on one of our websites that uses a reverse proxy which means the ajax requests will be going to a different domain.
We noticed that all ajax requests fired from frontend by ALM are failing due to a CORS Error because of a custom header that was sent with GET requests:
“Access to XMLHttpRequest at ‘https://’ from origin ‘https://’ has been blocked by CORS policy: Request header field x-requested-with is not allowed by Access-Control-Allow-Headers in preflight response.”

We noticed that the custom header “x-requested-with” was recently added in version 5.4.3.

Removing that header solved the problem.

We wanted to flag this issue in case anyone else faces it. Also, it would be great if a fix can be made to prevent this scenario from happening.

Thanks,
Alaa

• This topic was modified 3 years, 6 months ago by alaaawartani.