OSS跨域资源共享（CORS）常见问题_对象存储(OSS)-阿里云帮助中心

问题现象

浏览器报403错误，具体如下：

OPTIONS http://bucket.oss-cn-beijing.aliyuncs.com/
XMLHttpRequest cannot load http://bucket.oss-cn-beijing.aliyuncs.com/. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin '{yourwebsite}' is therefore not allowed access. The response had HTTP status code 403.

OSS报CORS请求不允许的错误，具体如下：

<Code>AccessForbidden</Code>
<Message>CORSResponse: This CORS request is not allowed. This is usually because the evaluation of Origin, request method / Access-Control-Request-Method or Access-Control-Request-Headers are not whitelisted by the resource's CORS spec.</Message>

可能原因

跨域规则配置错误。

问题现象

可能原因

解决方案