Scope: confirm + set Access-Control-Allow-Origin (and preflight) on the collect endpoints so a site on domain A can post to the analytics API on domain B. Document the requirement.
Done when: cross-origin installs send data without CORS errors.
Ingest: ensure CORS on /collect for cross-domain installs
#86Sign in to comment on this issue.