I'm using unity server version: 10.5.2.10000-5.
CORS setting is enabled on the server side and each client based request is working till the moment when i'm trying to get voicemail message attachment.
Browser request is following:
Browser response Headers are following:
You didn't show an example of a working request, but having messed with CORS a bit recently, I think some (most/all?) browsers will not allow a secure request from a non-secure page, and vice versa. I.e. in your request the host origin is insecure (http://localhost) and the scripted request is secure (https://<server>/vmrest)
If that's not the issue, then perhaps it is possible there is some defect in /vmrest that fails to handle same-origin just for message retrieval. Is it possible that requesting this message content URL actually results in a redirect to another URL or host (Mediasense?)
Thanks for the reply. I've tried on environment with https and the result is the same. All other CORS requests are passing (for example /vmrest/mailbox/folders/inbox/messages?type=voice returns all voice messages which i have) instead downloading of the attachment.