Skip to main content

Example Error: Access to XMLHttpRequest at 'https://api-iam.intercom.io/messenger/web/ping' from origin 'https://not-my-real-domain.com#39; has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

Hey @user1165​! Just wanted to make sure that you've followed these instructions in full for setting up Intercom to work with CSP and CORS?


@user1165​ 

I am having the same issue, did you sort it out?

 

@eric f11​  thank you for posting solution - but how and where do I enable CSP settings?

 

Looking forward to your help, thank you


Hey @munish​, CSP settings are typically managed by your system administrator on your end. This isn't something that you update within your Intercom workspace.


Reply