Block by CORS POLICY

Question

Hi i have .net mvc application I deploy it on iss when i run it from iis it works fine but when I access the application from other machines using IP i got below error message in console Access to XMLHttpRequest at 'http://localhost/ EvaluationSystem/Students/ GetList' from origin 'http://58.65.169.181' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. basically i am calling my method in razor view with http://localhost/EvaluationSystem/Student/GETLIST

Rijwan Ansari · Answer

Check article https://docs.microsoft.com/en-us/aspnet/core/security/cors?view=aspnetcore-5.0

Sachin Singh · Answer

step 1. Install below package Install-Package Microsoft.AspNet.Cors -Version 5.2.7 step 2. decorate controller with EnableCors attribute [EnableCors] public IActionResult Index() { return View(); } Note:- never enable cors for all origin.

Arnab Mukherjee · Answer

As you mentioned it is a .net mvc application, add the configuration setting in your web.config file to set the value for Access-Control-Allow-Origin in customHeaders - configuration > system.webServer > httpProtocol > customHeaders > add name = "Access-Control-Allow-Origin" value = "*" /> customHeaders > httpProtocol > system.webServer > configuration >

Mark Tabor · Answer

I also notice that IIS only work if I have localhost in below code $(document).ready(function () { $("#tblStudents").DataTable({ "ajax": { "url": " http://localhost/EvaluationSystem/Students/GetList ", "type": "POST", "processing": true, "serverSide": true, "datetype": "json" }, when i change it to IP then even it did not work on IIS

Mark Tabor · Answer

Yesterday it was working and today it stopped working , salman I have an IP address of my server so I am using it and when I browse the application from IIS it works fine but when I access it from other machines it return the above error

Pranam Bhat · Answer

This can resolved easily: Check my documentation here : https://www.linkedin.com/posts/pranam-bhat-11670689_cors-policy-activity-6706821461337886720-ppNf

Salman Beg · Answer

Instead of IP address why don't you deploy it on any domain and then try to access it. Thanks