bug: Cross-Origin Request Blocked #110

New Issue

2026-02-16T12:51:29-05:00

yindo commented

2026-02-16 12:51:29 -05:00

Originally created by @YoussefRefaat1976 on GitHub (Jun 17, 2025).

What happened?

This appears in the console when I try to upload all kinds of files ,photos Please help me

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://www.italytees.com/autumn/attachments. (Reason: header ‘authorization’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response).

Originally created by @YoussefRefaat1976 on GitHub (Jun 17, 2025). ### What happened? This appears in the console when I try to upload all kinds of files ,photos Please help me `Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://www.italytees.com/autumn/attachments. (Reason: header ‘authorization’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response).`

yindo added the bug label 2026-02-16 12:51:29 -05:00

yindo commented

2026-02-16 12:51:29 -05:00

@Docteh commented on GitHub (Jun 27, 2025):

From the Caddyfile extract in https://github.com/revoltchat/self-hosted/issues/153

@autumn path /autumn*
handle @autumn {
    uri strip_prefix /autumn
    reverse_proxy http://autumn:14704 {
        header_up Authorization {>Authorization}
    }
}

I forget if you ever explained why you've got an Authorization header there.

@Docteh commented on GitHub (Jun 27, 2025): From the Caddyfile extract in https://github.com/revoltchat/self-hosted/issues/153 ``` @autumn path /autumn* handle @autumn { uri strip_prefix /autumn reverse_proxy http://autumn:14704 { header_up Authorization {>Authorization} } } ``` I forget if you ever explained why you've got an Authorization header there.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stoatchat/self-hosted#110