To add the CORS authorization to the header using Apache, simply add the following line inside either the <Directory>
, <Location>
, <Files>
or <VirtualHost>
sections of your server config (usually located in a *.conf file, such as httpd.conf or apache.conf), or within a .htaccess
file:
<IfModule mod_headers.c> Header set Access-Control-Allow-Origin "*" </IfModule>
To ensure that your changes are correct, it is strongly recommended that you use
apachectl -tto check your configuration changes for errors. After this passes, you may need to reload Apache to make sure your changes are applied by running the command
sudo service apache2 reloador
apachectl -k graceful.
Altering headers requires the use of mod_headers. Mod_headers is enabled by default in Apache, however, you may want to ensure it's enabled by run
a2enmod headers
Note: you can also use add
rather than set
, but be aware that add
can add the header multiple times, so it's likely safer to use set.
The content on this site stays fresh thanks to help from users like you! If you have suggestions or would like to contribute, fork us on GitHub.
Save 39% on CORS in Action with promotional code hossainco at manning.com/hossain