CORS configuration?

[jfromaniello]

Any advice on CORS configuration?
I am using a domain for the cloudflare worker different than the app's domain... when I change from onesignal JS to the proxy I see this:

The cookie "__cf_bm" was rejected by an invalid domain.

[verificatorrus]

Hi 👋 Thanks for reporting this!

Regarding the The cookie "__cf_bm" was rejected by an invalid domain. message — this is related to Cloudflare trying to set a bot management cookie on a domain different from your app’s origin, which the browser rejects.

Just to better understand your situation:

🔹 Is this actually breaking any functionality for you?

Does the OneSignal SDK fail to load?

Are push notifications not working?

Do subscriptions fail?

Or is it just a console warning while everything still works?

If you could share more details about the exact impact, I’d be happy to suggest a solution tailored to your setup (e.g., CORS config or deploying the proxy under a subdomain of your app).

Thanks again for the feedback! 🙌