diff --git a/src/sentry/web/frontend/error_page_embed.py b/src/sentry/web/frontend/error_page_embed.py index c7242c88309c56..cc2ceabcdd922b 100644 --- a/src/sentry/web/frontend/error_page_embed.py +++ b/src/sentry/web/frontend/error_page_embed.py @@ -227,6 +227,11 @@ def dispatch(self, request: Request) -> Response: ), } - return render_to_response( + errorPageEmbedResponse = render_to_response( "sentry/error-page-embed.js", context, request, content_type="text/javascript" ) + + # User feedback dialog should be available regardless of cross-origin policy + errorPageEmbedResponse["Access-Control-Allow-Origin"] = "*" + + return errorPageEmbedResponse diff --git a/tests/sentry/web/frontend/test_error_page_embed.py b/tests/sentry/web/frontend/test_error_page_embed.py index c75ba5f10aaa63..db984d18a7d12b 100644 --- a/tests/sentry/web/frontend/test_error_page_embed.py +++ b/tests/sentry/web/frontend/test_error_page_embed.py @@ -71,6 +71,7 @@ def test_renders(self): HTTP_ACCEPT="text/html, text/javascript", ) assert resp.status_code == 200, resp.content + assert resp["Access-Control-Allow-Origin"] == "*" self.assertTemplateUsed(resp, "sentry/error-page-embed.html") def test_uses_locale_from_header(self):