# Allow cross origin requests only for message bus

**URL:** <https://meta.discourse.org/t/allow-cross-origin-requests-only-for-message-bus/266324>\
**Category:** Development\
**Created:** [May 26, 2023, 2:45pm UTC](https://meta.discourse.org/t/allow-cross-origin-requests-only-for-message-bus/266324 "2023-05-26T14:45:40Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![jkburges](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jkburges/32/104293_2.png) [@jkburges](https://meta.discourse.org/u/jkburges)\
**Post date:** [May 30, 2023, 1:46am UTC](https://meta.discourse.org/t/allow-cross-origin-requests-only-for-message-bus/266324/3 "2023-05-30T01:46:53Z")

</div>

You can add extra response headers per [the docs](https://github.com/discourse/message_bus#adding-extra-response-headers):

> In e.g. config/initializers/message\_bus.rb:
> 
> ```plaintext
> MessageBus.extra_response_headers_lookup do |env|
> [
> ["Access-Control-Allow-Origin", "http://example.com:3000"],
> ]
> end
> 
> ```

---

_[View the full topic](https://meta.discourse.org/t/allow-cross-origin-requests-only-for-message-bus/266324)._