# Kibana iFrame CORS

**URL:** <https://discuss.elastic.co/t/kibana-iframe-cors/54291>\
**Category:** Kibana\
**Created:** [June 29, 2016, 2:30pm UTC](https://discuss.elastic.co/t/kibana-iframe-cors/54291 "2016-06-29T14:30:56Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)\
**Post date:** [March 29, 2017, 11:13pm UTC](https://discuss.elastic.co/t/kibana-iframe-cors/54291/8 "2017-03-29T23:13:41Z")

</div>

Ah, yeah, that does indeed produce an error:

> [1] "origin" must be an array

Sorry about that. Looks like this is the right config:

`server.cors.origin: ['*']`

---

_[View the full topic](https://discuss.elastic.co/t/kibana-iframe-cors/54291)._