Configuring the CORS allowlist
- Last UpdatedMar 07, 2025
- 1 minute read
The CORS allowlist is controlled by the presence of a "CorsSetting.json" file. The file's location is the Configuration subfolder, located in the folder identified by the Data Path setting in the Historian Server configurator.
To configure CORS allowlist settings:
-
Launch the configurator, and select the Historian Server node. Note the location specified by the Data Path setting.

-
Locate the folder named Configuration inside the folder identified by the Data Path setting. For example, if the Data Path is C:\Historian, then use the folder C:\Historian\Configuration.
-
Create a text file in the Configuration folder, named CorsSetting.json. Copy the following text into the file to use as a template:
{
"Origin": ""
}
-
Within the second set of quotation marks, enter a comma-separated list of all the CORS origins granted access to the API, including scheme and port.
For example, the following sample would grant API access to requests from server1.company.com on port 8080, and server.company2.com on port 80:
{
"Origin": "http://server1.company.com:8080,http://server.company2.com:80"
}
-
Save the file, then restart the AVEVA Historian Web Client and AVEVA Historian Gateway services.