# Origin null is not allowed by access-control-allow-origin

**URL:** https://meta.discourse.org/t/origin-null-is-not-allowed-by-access-control-allow-origin/305684
**Category:** SSO
**Created:** [April 27, 2024, 11:31am UTC](https://meta.discourse.org/t/origin-null-is-not-allowed-by-access-control-allow-origin/305684 "2024-04-27T11:31:13Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![karlson4ik](https://avatars.discourse-cdn.com/v4/letter/k/dec6dc/32.png) [@karlson4ik](https://meta.discourse.org/u/karlson4ik)
#### Post date: [April 27, 2024, 11:31am UTC](https://meta.discourse.org/t/origin-null-is-not-allowed-by-access-control-allow-origin/305684/1 "2024-04-27T11:31:13Z")

</div>

My server with the application is on a different computer than discourse.  
I have connected discourse\_connect.  
Everything works on all browsers except Safari  
The problem is in the browser security policy, which forbids sending Origin=null  
 ![image_2024-04-27_12-25-56](https://global.discourse-cdn.com/meta/optimized/4X/9/d/c/9dc03977a5019d01d03bf3f5807b185a2ee19238_2_690x28.png)

But discourse does, it sends a request to my application with Origin=null  
Is there any way to customize Origin sending, or change something else in the security policies?