From Obsidian desktop >= 0.13.25 or mobile >= 1.1.1, Obsidian [provides a new API `requiestUrl`](https://forum.obsidian.md/t/obsidian-release-v0-13-25-insider-build/32701), that allows the plugin to fully bypass the CORS issue. As of Mar 2022, the latest public-released Obsidian desktop has supported this API, but the Obsidian mobile still stays in insider.
For using this plugin in Obsidian desktop <0.13.25ormobile<1.1.1,weneedtoconfiguretheserversidetoreturntheheader`Access-Control-Allow-Origin`allowingtheorigins`app://obsidian.md`and`capacitor://localhost`and`http://localhost`.Hereisanexample [configuration for Amazon S3](./s3_cors_configure.md).