Skip to main content
JasonWolf-cap
Level 2
September 29, 2026
Question

New AUE CORS issue appearing "response must not be the wildcard '*'"...

  • September 29, 2026
  • 0 replies
  • 3 views

A new Adobe Universal Page Editor error is occurring for a code base that was previously working prior to 9/28. 

 

The new error is “https://experience.adobe.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.”

 

The current OSGi configuration is as follows and does not establish anything from an origin perspective as a wildcard * 

```

{

  "alloworigin": [

    "https://localhost:3000"

  ],

  "allowedpaths": [

    "/(content|conf)/xfinity.*",

     "/graphql/execute.json/.*",

     "/api/.*"

  ],

  "exposedheaders": [

    "Authorization",

    "Origin",

    "Accept",

    "X-Requested-With",

    "Content-Type",

    "Access-Control-Request-Method",

    "Access-Control-Request-Headers",

    "CSRF-Token"

  ],

  "supportedheaders": [

    "Authorization",

    "Origin",

    "Accept",

    "X-Requested-With",

    "Content-Type",

    "Access-Control-Request-Method",

    "Access-Control-Request-Headers"

  ],

  "supportedmethods": [

    "GET",

    "HEAD",

    "POST",

    "OPTIONS",

    "PUT",

    "DELETE",

    "PATCH"

  ],

  "maxage": "-1",

  "supportscredentials": true,

  "alloworiginregexp": [

    "https://.*\\.adobe\\.com",

    "https://localhost:.*"

  ]

}

```