No está presente la cabecera 'Access-Control-Allow-Origin' a pesar de establecer DISCOURSE_ENABLE_CORS: true

[IAmGav (Gavin Perch)]

cors origins setting is controlled in admin > settings > security

you only need DISCOURSE_ENABLE_CORS: in your app.yml