Request header field X-CSRF-TOKEN is not allowed by Access-Control-Allow-Headers in preflight response

leedo / noembed

oEmbed gateway service with additional non-oEmbed sources

http://www.noembed.com

484 stars 90 forks source link

Open oranges13 opened 6 years ago

oranges13 commented 6 years ago

I'm unable to use noembed on my website due to the error:

Request header field X-CSRF-TOKEN is not allowed by Access-Control-Allow-Headers in preflight response

I've updated my server's CORS settings to include "X-CSRF-Token" but it doesn't appear to be making a difference. Please advise.

hardikrawal23 commented 6 years ago

Any solution on this? I have a similar issue.