We have many hosts in our CORS string. In the log file we put each one on its own line, so we can see whats what.
<add key="PortalCorsOriginUrl" value="http://localhost:4200,
http://localhost:4300,
http://10.1.1.56:4200,
http://192.168.0.101:4200,
http://192.168.0.101:4300,
http://10.1.1.160:4200,
http://10.1.1.160:4300,
"/>
We found that this broke Cors, as items on lines that started with CR or spaces were not detected.
var origin = G.SystemConfig.PortalCorsOriginUrl;
var originList = origin.Split(',');
Plugins.Add(new CorsFeature(allowOriginWhitelist: originList,allowed):
To fix it we needed to add
var origin = G.SystemConfig.PortalCorsOriginUrl;
var originList = origin.Split(',').Select(r => r.Trim()).ToList();
Plugins.Add(new CorsFeature(allowOriginWhitelist: originList, allowed:
Not sure if its a bug, but its a very difficult issue to track down.