Sudden CORS Failure - Browser blocking content because domain names don't match

Grafana
1

I have a downstream client that has been using the IFRAME method to display grafana panels and it’s suddenly stopped working (browser is blocking the content because the domain names don’t match.). The “allow-origin” setting is supposed to allow the unmatched domain, but not sure why it stopped working.

I’ve reverted to the previous version of grafana (9.3.6) from the 10.1 but no change in behavior.

Any information would be helpful.

2

what do you have for this setting?

allow_embedding = true
3

yes.
plus
SAMESITE = none
COOKIE_SECURE = true
LIVE_ALLOWED_ORIGINS=https://…

Again this was working, then stopped. So it’s likely some network thing

1 Like
4

The client using the IFRAMEs responded that it was a networking issue on their end.

1 Like