Out of 300 global security teams, 297 see their growth stalled by security threats. See how the winning 3 break through barriers with the State of Security 2026.

XMLHttpRequest cannot load ... No 'Access-Control-Allow-Origin' header

If you're facing an issue with one of our assets with a console error like:

XMLHttpRequest cannot load https://a.storyblok.com/f/51376/269x200/5d406b6054/advanced.svg. No 'Access-Control-Allow-Origin' header is present on the requested resource. 

It's because the images was processed via JavaScript instead of using it directly. To get around that issue if you still need to use JavaScript to set your image you can work around it using https://s3.amazonaws.com/a.storyblok.com instead of https://a.storyblok.com.