Google URL Inspector Registers No 'Access-Control-Allow-Origin' Errors (Doc ID 2972487.1)

Last updated on SEPTEMBER 11, 2023

Applies to:

Goal

When I use the Google URL Inspection tool I can see the "Crawled Page" which fetches the page from the Google Search Index and a "Live Test" which is what has thrown CORS errors like:

Access to XMLHttpRequest at 'https://ocm.example.com/content/published/api/v1.1/items?' from origin 'https://www.example.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

So it seems like Googlebot is behaving itself and crawling from the page with 'Origin' header so that 'Access-Control-Allow-Origin' is set, but the "Live Test" does not for some reason. Why is this behaviour occurring?
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.