CORS error for import-map.json

[HarshPrajapati]

I am getting this kind of error while importing file

:5500/:1 Access to fetch at 'http://localhost:4848/resources/qmfe/import-map.json' from origin 'http://127.0.0.1:5500' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

I am using pure JS and HTML to work with , is there any suggestions for me?

[Damien_Villaret]

Hello @HarshPrajapati 

This is a known issue in the Qlik Sense August 2023 release(QB-21812), there is no fix available yet.

You can use an earlier version of Qlik Sense such as May 2023 as a workaround

Best regards,

[HarshPrajapati]

I found solution , I used my Id instead of local URL , and everything worked perfectly

[sigaam]

Hi @Damien_Villaret  Has there been any update regarding fix available for CORS problems after updating to the August 2023 release?

[Damien_Villaret]

Hi @sigaam 

This will be fixed in the next August 2023 Patch (Patch4) and in the November 2023 release.

However we do not have a release date yet.

Best regards,

[Damien_Villaret]

Hi @sigaam 

August 2023 Patch4 has been released, however the fix in Patch4 is partial (We plan a full fix that doesnt require mashup code change in August 2023 Patch5 and November 2023)

Currently with the fix provided in August Patch4, it's necessary to modify the tag loading require.js and qlik-styles.css

<link crossorigin="use-credentials" rel="stylesheet" href="https://<sense-server>/resources/autogenerated/qlik-styles.css"></link>
<script crossorigin="use-credentials" src="https://<sense-server>/resources/assets/external/requirejs/require.js"></script>

 and add crossorigin="use-credentials" 

[Ken_T]

@Damien_Villaret do you know if this issue is also present on SAAS and QCG products?
does the same workaround work?

[Damien_Villaret]

@Ken_T  We've had reports of it happening between March 5th ~ March 9th in Qlik Cloud but then started working again after that.
If you're still seeing the issue, please raise a support case with exact steps to replicate so that we can further investigate. We haven't been able to confirm if the above workaround also helps with the issue in Qlik Cloud.

[marcobqlik]

Hi @Damien_Villaret , 

We are facing a similar issue when using the mashup services on QAP February 2024 Patch 2 (upgraded from a working code on May 2023 Patch 6). 

Access to fetch at 'https://{OurQlikQAPServer}/jwt/resources/qmfe/import-map.json' from origin 'https://{OurFrontEndWebsite.com}' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

We have tryed your suggestion adding crossorigin="use-credentials" when loading require.js and qlik-style.css with no success (same error as before). Any change to the vistual proxy/whitelistnening has also failed.

Can you confirm this issue is still present and under investigation and is there any other workaround you suggest? Is there a way to amend the Qlik webserver directly to avoid CORS issues?

Thank you,

Marco 

[Parmo]

We are also seeing this issue in February 2024 Patch1. Is this something Qlik support are actively investigating?