# No 'Access-Control-Allow-Origin' header is present despite setting DISCOURSE\_ENABLE\_CORS: true

**URL:** <https://meta.discourse.org/t/no-access-control-allow-origin-header-is-present-despite-setting-discourse-enable-cors-true/207398>\
**Category:** Support\
**Created:** [October 28, 2021, 1:44pm UTC](https://meta.discourse.org/t/no-access-control-allow-origin-header-is-present-despite-setting-discourse-enable-cors-true/207398 "2021-10-28T13:44:00Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [October 28, 2021, 2:12pm UTC](https://meta.discourse.org/t/no-access-control-allow-origin-header-is-present-despite-setting-discourse-enable-cors-true/207398/5 "2021-10-28T14:12:35Z")

</div>

I’m not sure we support the wildcard here. Can you try it with a real domain? We are using the cors settings in a couple sites with domains configured and it appears to work fine.

---

_[View the full topic](https://meta.discourse.org/t/no-access-control-allow-origin-header-is-present-despite-setting-discourse-enable-cors-true/207398)._