unleash.unleash/website/docs/how-to/how-to-troubleshoot-cors.md

---
title: My requests are being blocked by CORS
---

1. Make sure you've configured CORS access in Unleash admin UI settings as defined in the [Unleash CORS Policy docs](../reference/front-end-api#cors). These settings can be changed in the Unleash Dashboard under **Settings -> CORS Origins** or by using the [API](../reference/api/unleash/set-ui-config). Allowing all origins (using a single asterisk) will address this matter and is a great starting point when troubleshooting the behavior.
1. When receiving "**No 'Access-Control-Policy' header is present on the requested resource**", using the command `curl -I https://<host>/<endpoint>` will allow us to verify that the response includes the header `Access-Control-Allow-Origin: *`.
docs: troubleshooting guides (#4592) ## About the changes Adds troubleshooting guides for some common problems under the how-to area (following the [diataxis framework](https://diataxis.fr/)). This is part of Unleash 2023 offsite challenge --------- Co-authored-by: Drew Gorton <drew.gorton@getunleash.io> Co-authored-by: Diego Susa <diego@getunleash.io> Co-authored-by: Michael Vittiglio <michael.vittiglio@getunleash.io> Co-authored-by: Thomas Heartman <thomas@getunleash.ai> 2023-09-01 15:39:23 +02:00			`---`
			`title: My requests are being blocked by CORS`
			`---`

			`1. Make sure you've configured CORS access in Unleash admin UI settings as defined in the [Unleash CORS Policy docs](../reference/front-end-api#cors). These settings can be changed in the Unleash Dashboard under Settings -> CORS Origins or by using the [API](../reference/api/unleash/set-ui-config). Allowing all origins (using a single asterisk) will address this matter and is a great starting point when troubleshooting the behavior.`
			1. When receiving "No 'Access-Control-Policy' header is present on the requested resource", using the command `curl -I https://<host>/<endpoint>` will allow us to verify that the response includes the header `Access-Control-Allow-Origin: *`.