Salesforce CORS Allowlist

This lists origins that are allowed for cross-origin resource sharing (CORS).

To allow code (such as JavaScript) running in a Web browser to communicate with Salesforce from a specific origin, add the origin to the allowed list.


Setup | Quick Find box | enter CORS | select CORS | Select New | Enter a resource in Origin URL Pattern (like https://*.something.com)| Save


Reference - https://help.salesforce.com/s/articleView?id=sf.extend_code_cors.htm&type=5


Visual - https://www.youtube.com/watch?v=K5DQN9JTnjw




Comments