How to Enable CORS in Apache

Cross-Origin Resource Sharing (CORS) is the process, which tells the web browsers to allows resources running form different origins (domain, protocol, or port) via HTTP headers. This tutorial will help you to enable CORS in the Apache webserver.

Prerequsities

You must have enabled Apache headers modules. The Redhat based have default enabled headers modules. For the Ubuntu and Debian, based systems execute the following command to enable headers modules.

a2enmod headers

Enable CORS in Apache

Set Access-Control-Allow-Origin (CORS) authorization to the header in Apache web server. Add the following line inside either the <Directory>, <Location>, <Files> sections under <VirtualHost> in Apache configuration files. You can also place this inside the .htaccess file.

 Header set Access-Control-Allow-Origin "*"

Example

To allow Access-Control-Allow-Origin (CORS) authorization for all origin domains for all files inside a directory.

To allow Access-Control-Allow-Origin (CORS) authorization for specific files only. For example to allow CORS for fonts only use following example:

To allow Access-Control-Allow-Origin (CORS) with multiple origin domains, Use following example

After making changes in configuration files, You need to restart the Apache webserver. But no need to restart if adding in the .htaccess file.