Getting access-control-allow-origin as * in AEM cloud publisher domain

we are in process of migration of project from AMS to cloud in AEM.

while security review , we are getting access-control-allow-origin: * , while accessing the content/dam images, which is a high security issue.

we are not setting this in our dispatcher, but we are still getting this.

Do we have any solution for this.

Guessing is it coming from the internal Fastly's CDN?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Community Advisor

Are you using connected assets ? If yes then take a look

Himanshu Jain

No we are not using connected assets.

These are simple assets in publish which we are trying to access via publish domain in cloud and getting access-control-allow-origin: *

Community Advisor

Any solutions for this, to control allowed origins?

Do you have any custom servlet where you are defining the header ?

Thanks

Himanshu Jain

Sign up