GitHub user dosubot[bot] added a comment to the discussion: Deck.gl map change 
style directly on dashboard

<!-- Answer -->
The CORS error occurs because the server hosting your tile images 
(http://storage.cockpit.hell.ee.loc) is not sending the required 
Access-Control-Allow-Origin header in its HTTP responses. This header must be 
set by the server itself to allow browsers to load resources from a different 
origin (like your Superset frontend).

TALISMAN_DEV_CONFIG in Superset only controls which resources the browser is 
allowed to load from the Superset side (by setting Content Security Policy 
headers), but it cannot add CORS headers to responses from external servers. 
So, changing img-src or connect-src in TALISMAN_DEV_CONFIG will not resolve 
this error.

To fix the CORS issue, you need to configure the server that serves your tile 
images to include the Access-Control-Allow-Origin header. For example, if you 
are using Nginx to serve the tiles, add this to your Nginx config:

```nginx
location /hillshades/ {
    add_header 'Access-Control-Allow-Origin' '*';
    # ...other config...
}
```

If you use Apache, add this to your .htaccess or server config:

```apache
<FilesMatch "\.(png|jpg|jpeg|gif)$">
    Header set Access-Control-Allow-Origin "*"
</FilesMatch>
```

After updating your server configuration, reload or restart your web server. 
Then, try loading the tile URL directly in your browser and check the response 
headers (in the Network tab) to confirm that Access-Control-Allow-Origin is 
present.

Note: The 404 status code also means the specific tile file does not exist at 
that path. Make sure the file is present and accessible on the server.

In summary: CORS must be fixed on the tile server, not in Superset or 
TALISMAN_DEV_CONFIG.


<!-- Dosu Comment Footer -->
*To reply, just mention my name [@dosu](https://go.dosu.dev/dosubot).*

---
<sup>How did I do? 
[Good](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=great_response)
 | 
[Irrelevant](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=irrelevant_answer)
 | 
[Incorrect](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=incorrect_sources)
 | 
[Verbose](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=too_verbose)
 | 
[Hallucination](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=hallucination)
 | [Report 
🐛](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=bug_report)
 | 
[Other](https://app.dosu.dev/response-feedback/5cb3e231-7dd6-4c6c-be7e-38bb5d0280de?feedback_type=other)</sup>&nbsp;&nbsp;[![Join
 
Discord](https://img.shields.io/badge/join-5865F2?logo=discord&logoColor=white&label=)](https://go.dosu.dev/discord-bot)&nbsp;[![Sh
 are on 
X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/32149)

GitHub link: 
https://github.com/apache/superset/discussions/32149#discussioncomment-13298529

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: 
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to