Newspaper is creating 'header set access-control-allow-origin "*" (wildcard)?

Posted in: Newspaper
Post count: 13

Hi,

i use revive adserver to serve ads. After plenty of hours i decided to change the theme and the issue was gone.

This is the problem: HTML5 banners are not working with newspaper theme. It is working with other themes, on other domains, systems etc.

The Adservers hostname is a subdomain of the domain that should show the ads. Like adserver.example.com

On example.com, i get these errors (only when HTML5 is delivered, image banners working well):

(index):1 Failed to load https://adserver.example.com/www/delivery/asyncspc.php?zones=5|9|10|11|9|11|9|9&prefix=revive-0-&loc=https%3A%2F%2Fexample.com%2F&referer=https%3A%2F%2Fexample.com%2F: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. Origin 'https://example.com' is therefore not allowed access. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

Revive sets it’s own header, therefore they collide. Revive is setting the domain where the banner should placed. Newspaper seems to set a wildcard.

How can i get rid of that wildcard?

Thank you very much for helping.

  • This topic was modified 8 years by Marolynx.
  • This topic was modified 8 years by Marolynx.
Post count: 20688

Hi,

I couldn’t say what exactly is the problem here. The Access-Control-Allow-Origin would be related to server configuration, not a theme element
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
More information here
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
https://www.html5rocks.com/en/tutorials/cors/
However we did not make any kind of tests with that ad implementation, if there are problems then there might be a level of incompatibility.

Thank you!

Viewing 2 posts - 1 through 2 (of 2 total)
The forum ‘Newspaper’ is closed to new topics and replies.