# CORS policy error message with ElasticsearchJS (Kibana plugin visualization)
**URL:** https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993
**Category:** Elasticsearch
**Created:** [February 12, 2019, 9:12am UTC](https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993 "2019-02-12T09:12:55Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@bard0x](https://discuss.elastic.co/u/bard0x)
#### Post date: [February 12, 2019, 9:12am UTC](https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993/1 "2019-02-12T09:12:55Z")
Hi guys,
I developed a kibana plugin visualization integrating elasticsearch-browser to comunicate with elasticsearch.
When I configure elasticsearch-browser with an angularJS application, if I try to ping my ES instance, in the console of my browser appared this errore message:
Access to XMLHttpRequest at '[http://127.0.0.1:9200/](http://127.0.0.1:9200/)' from origin '[http://127.0.0.1:5601](http://127.0.0.1:5601)' has been blocked by CORS policy: Request header field kbn-version is not allowed by Access-Control-Allow-Headers in preflight response.
Why? How I do to resolve this problem?
Thank's in advance for the replies!
---
### Author:  [@bard0x](https://discuss.elastic.co/u/bard0x)
#### Post date: [February 12, 2019, 9:21am UTC](https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993/2 "2019-02-12T09:21:07Z")
> [@bard0x](#):
>
> Request header field kbn-version is not allowed by Access-Control-Allow-Headers in preflight response.
I resolved adding this in elasticsearch.yml
```auto
http.cors.enabled : true
http.cors.allow-origin : "*"
http.cors.allow-methods : OPTIONS, HEAD, GET, POST, PUT, DELETE
http.cors.allow-headers: "kbn-version, Origin, X-Requested-With, Content-Type, Accept, Engaged-Auth-Token"
```
Thanks!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 12, 2019, 9:21am UTC](https://discuss.elastic.co/t/cors-policy-error-message-with-elasticsearchjs-kibana-plugin-visualization/167993/3 "2019-03-12T09:21:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.