Skip to main content
Last updated on

CORS Configuration

The CORS tab sets up the list of origins allowed to access the bucket from a browser. When nothing is configured yet, the table shows Chưa có cấu hình CORS. (No CORS configuration yet.)

CORS tab - no configuration

A form, not a JSON editor

Unlike Bucket Policy and Lifecycle Config, the CORS tab uses separate form fields — you don't need to know CORS's JSON syntax.

Add a CORS rule​

Click Cập nhật (Update) to enter edit mode, then click Thêm (Add) to add a new rule row:

  • Allowed Origins — allowed domains, comma-separated (e.g. https://example.com, *).
  • Allowed Headers / Expose Headers — comma-separated header lists.
  • Allowed Methods — checkboxes for the 5 fixed methods: GET, PUT, POST, DELETE, HEAD.
  • Max Age Seconds — how long (in seconds) the browser can cache a preflight result, suggested default 3600.

Add CORS rule form

Click Lưu thay đổi (Save changes) to apply, or Huỷ (Cancel) to exit edit mode without saving. The trash icon at the end of a row removes that rule before saving.

Remove the whole configuration​

Once a configuration exists, the Xoá cấu hình (Delete configuration) button in the top-right becomes available. Confirming only needs a click on Xác nhận (Confirm) — no need to retype anything.