I’m using the Storefront API version 2025-04 on an Online Store. I’m currently facing a CORS issue on the merchant’s website. Specifically, domains ending in .myshopify.com are being blocked by CORS, and only domains that match the merchant’s own domain are being accepted.
**
“Access to fetch at ‘https://florade-de.myshopify.com/api/2025-04/graphql.json’ from origin ‘https://florade.de’ has been blocked by CORS policy: Request header field cache-control is not allowed by Access-Control-Allow-Headers in preflight response.”
**
I’ve checked the Shopify Storefront API documentation but haven’t seen any updates or notices about this change.
Has anyone here encountered this issue recently? If so, how did you resolve it?
Thank you in advance!