I mean the fix is literally to just have the server only return a single access-control-allow-origin header. It's super embarassing that this is still not fixed. My clients are super pissed and I am definitely looking elsewhere for my headless CMS needs in the future.
2 Likes