Help Resolving a CORS issue

[soehlblaze]

I am trying to serve a linear video ad across domains. The preroll will not play and I am receiving the following error

A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header when the credentials flag is true. Origin 'http://example.com' is therefore not allowed access. The credentials mode of an XMLHttpRequest is controlled by the withCredentials attribute.

I made changes to the to / www / delivery / spc.php file commenting header('Access-Control-Allow-Origin: *'); and adding 

MAX_header('Access-Control-Allow-Origin: https://example.com');
MAX_header('Access-Control-Allow-Credentials: true');

I am still receiving the same error. If someone can point in the direction to resolving this issue it would be greatly appreciated.

[Ian]

https://enable-cors.org/server.html

[andrewatfornax]

Based on the date of the post, I suspect this was a bug, which has been resolved in more recent releases. Alternatively, it may have been related to some missing documentation, which has also now been created. Hopefully, this is no longer an issue for users!