New Discourse user here just trying to get a basic site skeleton up. So far, almost everything has been smooth except for getting the comment-embedding/post-generating functionality to work. I have my Discourse instance running on a Digital Ocean droplet, as per the setup instructions. My discourse url is: http://discuss.singlebagtravel.com My static site is located at: http://singlebagtravel.com I have added: DISCOURSE_ENABLE_CORS: true to the app.yml file and re-launched. I have set Settings > Security > cors origins to: http://singlebagtravel.com The console on my static site where I embed the comments shows this: Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘http://discuss.singlebagtravel.com’) does not match the recipient window’s origin (‘http://singlebagtravel.com’) There are a number of similar posts that I found in the forums that have helped me get this far, but none of the solutions suggested in any of them have worked for me. I feel like I may be missing something obvious here, because it seems like it should work. Thanks!

Turns out it was a ridiculously simple mistake - apparently there is a “Save Embedding Settings” button at the very far bottom left of the screen on the settings. Even though it looks like clicking the blue check mark next to the host does the “save”, you still need to find that save button and click it. Additionally, once I did find it I was alerted to the fact that I needed to enter a username. Honestly, that save button is really unintuitive - it is difficult to find, there is no penalty for not hitting it, the page seems to save my settings regardless (but not apply them I guess?) and none of the guides on this mention that I need to find it and hit it.

@codinghorror Seems like that should have solved it, but the error is the same even with http://discuss.singlebagtravel.com added to cors origins.

CORS Error when embedding comments in Gitlab-hosted Jekyll static site

Product Support

codinghorror (Jeff Atwood) October 16, 2017, 10:38pm 2

Looks like you need to add both domain and sub domain in your cors settings then?

Topic		Replies	Views
Embedding comments issue Product Support	4	2400	June 26, 2015
Error embedding Discourse Product Support	6	862	April 30, 2020
Multiple cors origins on hosted discourse? Product Support	8	3241	August 21, 2017
discourseEmbed, does not match recipient window origin Product Support	6	4106	March 16, 2017
Failed to execute postMessage on DOMWindow: The target origin provided does not match Self-hosting	6	18539	January 5, 2018

CORS Error when embedding comments in Gitlab-hosted Jekyll static site

Related topics