# Access-Control-Allow-Origin Policy

**URL:** <https://answers.netlify.com/t/access-control-allow-origin-policy/1813>\
**Category:** Support\
**Tags:** cors, authentication\
**Created:** [July 2, 2019, 3:17pm UTC](https://answers.netlify.com/t/access-control-allow-origin-policy/1813 "2019-07-02T15:17:12Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![edel020](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/edel020/32/1576_2.png) [@edel020](https://answers.netlify.com/u/edel020)\
**Post date:** [July 3, 2019, 6:07am UTC](https://answers.netlify.com/t/access-control-allow-origin-policy/1813/2 "2019-07-03T06:07:49Z")

</div>

Found the solution: this netlify.toml file will do the trick:

```
# The following redirect is intended for use with most SPAs that handle
# routing internally.
[[redirects]]
  from = "/*"
  to = "/index.html"
  status = 200

[[headers]]
  # Define which paths this specific [[headers]] block will cover.
  for = "/*"
    [headers.values]
    Access-Control-Allow-Origin = "*"
```

---

_[View the full topic](https://answers.netlify.com/t/access-control-allow-origin-policy/1813)._