System Variable 1061: CORS Setting for V9 API

Use System Variable 1061: CORS Setting for V9 API to authorize external websites to access the WorkBook API.

Cross-Origin Resource Sharing (CORS) refers to websites that request information from different domains other than their own.

The following is an example of a cross-origin request:

The front-end JavaScript code served from https://domain-a.com uses XMLHttpRequest to make a request for https://domain-b.com/data.json.

For security reasons, any cross-origin request must be authorized to use WorkBook via System Variable 1061. WorkBook will only allow cross-origin requests from URLs specified in the System Variable. Multiple URLs can be added, separated by a semicolon (;) or a comma (,).

Note: Any change to this setting requires a site restart before it can take effect. Deltek-hosted clients may reach out to Customer Care by submitting a Support Case. Self-hosted clients may contact IT.

It is possible to authorize requests from any source by including an asterisk (*) but this will leave the system vulnerable to attacks. System Variable 1061 should be left empty (CORS disabled) or enabled only for trusted sites.

This System Variable is a part of the Setup grouping.