1

New Craft user here and I am working on wrapping up my first Craft site and am running into a Live Preview error.

When Live Preview is activated in either Firefox or Safari, I just get a blank white page and am getting this error thrown in the console:

XMLHttpRequest cannot load http://mysite.com/section/slug. Cross-origin redirection denied by Cross-Origin Resource Sharing policy.

I'm not really sure what that is other than it sounds like I need to give something access that doesn't have it. And I'm not sure why this error doesn't get thrown in for Chrome or IE.

Any help would be appreciated!

|improve this question|||||
3

CORS (or Cross-Origin Resource Sharing) issues usually occur when you are attempting to load a resource such as a font, a stylesheet, or a script from a remote location that does not give your domain explicit permission to access it. Thinking the resource is unsafe, your browser will block it.

Are these pages attempting to load any resources from remote locations such as a CDN or web storage like an S3 bucket? If so, you may need to edit your CORS policy for those services to mark your resources as "safe" for your domain.

|improve this answer|||||
  • Ok, so it's basically like a gatekeeper. And no, don't have any external assets. – Jesse O'Neill Oct 25 '16 at 18:21
3

Ok, so after going through the logs in craft/storage/runtime I found the problem.

I'm using environment variables for my sites url and had it set to:

mysite.com

However when going to the site using Safari or Firefox it was tacking on the www subdomain so I was actually at www.mysite.com. I guess according to that CORS thing the subdomain of www didn't have permission to access anything, only the origin of mysite.com did.

I went ahead and changed my environment variables to:

www.mysite.com

and then created a redirect in my .htaccess file to always point to the www subdomain. I don't know if this is the proper fix but it works! I'm sure theres a way to tell the CORS thing that the www subdomain is an ok guy and can have permission. I just don't know how.

|improve this answer|||||
  • I also had problems with external resources... It's just Firefox and Safari Craft Live Preview. We are running the system currently with a staging subdomain. Does someone has more explanation what could cause this error. The defined policies are working well on the page, its just the preview – Simon Franzen Jan 10 '18 at 20:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.