Remove CORS from _cmsinternal

Experience Manager (PaaS/OnPrem)
1

For debugging purposes we would like to call the https://test-clientname.onehippo.com/site/_cmsinternal/resourceapi from a local frontend project.

This gives CORS related issues.

Below the hst:clientname/hst:hosts configuration On the hst:root (primary hst:mount) we have configured the response headers:
hst:responseheaders
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

Apparently this doesn’t apply to _cmsinternal. Any suggestions/clues/tips?

Thank you.

2

That endpoint is added to the site mount dynamically i believe. I don’t think it’s meant to be accessed outside with a cors request. (perhaps other people can elaborate on this)

Maybe it’s an option to create a specific “preview” mount. If you create a mount with hst:type=preview