# Mautic problem with Access-Control-Allow-Origin

**URL:** <https://forum.mautic.org/t/mautic-problem-with-access-control-allow-origin/8122>\
**Category:** Product Support\
**Created:** [April 6, 2017, 12:44pm UTC](https://forum.mautic.org/t/mautic-problem-with-access-control-allow-origin/8122 "2017-04-06T12:44:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![giullianosoares](https://avatars.discourse-cdn.com/v4/letter/g/e9a140/32.png) [@giullianosoares](https://forum.mautic.org/u/giullianosoares)\
**Post date:** [April 6, 2017, 12:44pm UTC](https://forum.mautic.org/t/mautic-problem-with-access-control-allow-origin/8122/1 "2017-04-06T12:44:09Z")

</div>

When I configure Mautic in “another” domain, I have this message.  
  
  
  
Is bug? Have solution?  
  
  
  
XMLHttpRequest cannot load [http://materiais.ciadecomedia.com.br/mtc/event](http://materiais.ciadecomedia.com.br/mtc/event). Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘[http://blog.ciadecomedia.art.br](http://blog.ciadecomedia.art.br)’ is therefore not allowed access.  
  
  
  
POST [http://materiais.ciadecomedia.com.br/form/submit?formId=1](http://materiais.ciadecomedia.com.br/form/submit?formId=1) 500 (Internal Server Error)  
  
app.js?v0fba60da:197 Uncaught DOMException: Blocked a frame with origin “[http://materiais.ciadecomedia.com.br](http://materiais.ciadecomedia.com.br)” from accessing a cross-origin frame.  
  
at HTMLDocument. ([http://materiais.ciadecomedia.com.br/media/js/app.js?v0fba60da:197:36](http://materiais.ciadecomedia.com.br/media/js/app.js?v0fba60da:197:36))  
  
at fire ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:328:299](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:328:299))  
  
at Object.fireWith [as resolveWith] ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:333:198](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:333:198))  
  
at Function.ready ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:11](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:11))  
  
at HTMLDocument.completed ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:291](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:291))  
  
(anonymous) @ app.js?v0fba60da:197  
  
fire @ libraries.js?v0fba60da:328  
  
fireWith @ libraries.js?v0fba60da:333  
  
ready @ libraries.js?v0fba60da:340  
  
completed @ libraries.js?v0fba60da:340

---

<div class="post-metadata">

**Author:** ![giullianosoares](https://avatars.discourse-cdn.com/v4/letter/g/e9a140/32.png) [@giullianosoares](https://forum.mautic.org/u/giullianosoares)\
**Post date:** [April 6, 2017, 12:44pm UTC](https://forum.mautic.org/t/mautic-problem-with-access-control-allow-origin/8122/2 "2017-04-06T12:44:09Z")

</div>

When I configure Mautic in “another” domain, I have this message.

Is bug? Have solution?

XMLHttpRequest cannot load [http://materiais.ciadecomedia.com.br/mtc/event](http://materiais.ciadecomedia.com.br/mtc/event). Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘[http://blog.ciadecomedia.art.br](http://blog.ciadecomedia.art.br)’ is therefore not allowed access.

POST [http://materiais.ciadecomedia.com.br/form/submit?formId=1](http://materiais.ciadecomedia.com.br/form/submit?formId=1) 500 (Internal Server Error)  
app.js?v0fba60da:197 Uncaught DOMException: Blocked a frame with origin “[http://materiais.ciadecomedia.com.br](http://materiais.ciadecomedia.com.br)” from accessing a cross-origin frame.  
at HTMLDocument. ([http://materiais.ciadecomedia.com.br/media/js/app.js?v0fba60da:197:36](http://materiais.ciadecomedia.com.br/media/js/app.js?v0fba60da:197:36))  
at fire ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:328:299](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:328:299))  
at Object.fireWith [as resolveWith] ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:333:198](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:333:198))  
at Function.ready ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:11](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:11))  
at HTMLDocument.completed ([http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:291](http://materiais.ciadecomedia.com.br/media/js/libraries.js?v0fba60da:340:291))  
(anonymous) @ app.js?v0fba60da:197  
fire @ libraries.js?v0fba60da:328  
fireWith @ libraries.js?v0fba60da:333  
ready @ libraries.js?v0fba60da:340  
completed @ libraries.js?v0fba60da:340

---

<div class="post-metadata">

**Author:** ![JConnell](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/jconnell/32/159_2.png) [@JConnell](https://forum.mautic.org/u/JConnell)\
**Post date:** [April 6, 2017, 2:07pm UTC](https://forum.mautic.org/t/mautic-problem-with-access-control-allow-origin/8122/3 "2017-04-06T14:07:46Z")

</div>

Unless Mautic and the site the form is being embedded on share the same domain name, check that X-Frame-Options is not set to SAMEORIGIN on the server running Mautic.

In Nginx, look for this line: add\_header X-Frame-Options “SAMEORIGIN”;  
In Apache, look for this line: Header always append X-Frame-Options SAMEORIGIN

Comment the line out, reload the web server, and try submitting the form again. No need to clear caches on either Mautic or the website.