remotely-save/docs/browser_env_cors.md

Limitations From The Browser Environment: CORS Issue

The plugin is developed for the browser environment. The "fake" browser behind the scenes also follows the CORS policy.

MDN has a doc about CORS.

From Obsidian desktop >= 0.13.25 or mobile >= 1.1.1, Obsidian provides a new API requiestUrl, that allows the plugin to fully bypass the CORS issue. As of Mar 2022, the latest public-released Obsidian desktop has supported this API, but the Obsidian mobile still stays in insider.

For using this plugin in Obsidian desktop < 0.13.25 or mobile < 1.1.1, we need to configure the server side to return the header Access-Control-Allow-Origin allowing the origins app://obsidian.md and capacitor://localhost and http://localhost. Here is an example configuration for Amazon S3.