# Setup Cross-Origin Resource Sharing (CORS)

**URL:** https://meta.discourse.org/t/setup-cross-origin-resource-sharing-cors/270819
**Category:** Self-Hosting
**Tags:** how-to
**Created:** [July 6, 2023, 9:46pm UTC](https://meta.discourse.org/t/setup-cross-origin-resource-sharing-cors/270819 "2023-07-06T21:46:39Z")
**Posts on this page:** 1
**Showing post:** 8

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [May 30, 2025, 2:50pm UTC](https://meta.discourse.org/t/setup-cross-origin-resource-sharing-cors/270819/8 "2025-05-30T14:50:39Z")

</div>

> [@NateDhaliwal](#):
>
> Try it without the double quotes, otherwise it can be interpreted as a string instead of a boolean.

Here it’s going into an environment variable, which can only be a string. Doesn’t matter.

But in general this is a good thing to keep in mind since you can get unexpected results for innocuous-looking values:

```plaintext
pry(main)> YAML.load('on: yes').to_s
=> "{true=>true}"

```

---

_[View the full topic](https://meta.discourse.org/t/setup-cross-origin-resource-sharing-cors/270819)._