Feature Overview

HTTP response headers are a component of the header section in HTTP response messages. HTTP response headers carry specific response header parameters to clients. After you specify an HTTP response header, CDN carries the specified header in a returned response message to implement a specific feature when a user requests a resource on an accelerated domain. Cross-Origin Resource Sharing (CORS) is a standard cross-origin solution provided by HTML5. CORS allows web application servers to perform cross-origin access control and ensure secure cross-origin data transmission. When cross-origin resource sharing or access is required in your business, you can configure custom HTTP response headers.

Procedure

Log in to the CDN console.
Go to Domain Management -> Domain List page.
On the Domain Names page, find the target domain name, and click Edit in the Actions column.
Click Cache .
Click the HTTP Response Headers tab.
Click Add . Enter an HTTP response header parameter in the Parameter field. The parameter name can only contain uppercase letters, lowercase letters, digits, underscores (_), and hyphens (-). Enter a value in the Value field. Chinese characters are not supported. If you leave this field empty, the system deletes the corresponding response header.
Click Save and submit.

Additional Considerations

If you have configured CORS response headers on your origin server and in the CDN console, the configuration in the CDN console overwrites the configuration on the origin server.
After you configure a CORS response header in the CDN console, CDN always returns Access-Control-Allow-Origin and the corresponding value for a user request, regardless of whether the Origin request header is included in the request and what is specified for the Origin request header.

Content Delivery Network

CORS settings