Cross-Origin Read Blocking (CORB) blocked cross-origin response thredds about thredds HOT 2 OPEN

Hi again all,
It should be noted that when I try to get response from socib thredds then the followoing error released:

My JavaScript code:

$.ajax({
    url: 'http://thredds.socib.es/thredds/wms/operational_models/oceanographical/hydrodynamics/model_run_aggregation/wmop_3d/runs/wmop_3d_RUN_2020-09-06T00:00:00Z?LAYERS=sst_gradients&ELEVATION=0&TIME=2020-09-06T12%3A00%3A00.000Z&TRANSPARENT=true&COLORSCALERANGE=-50%2C50&NUMCOLORBANDS=20&LOGSCALE=false&SERVICE=WMS&VERSION=1.1.1&REQUEST=GetMetadata&item=minmax&FORMAT=image%2Fpng&SRS=EPSG%3A4326&BBOX=-5.6843418860808e-14,37.5,7.4999999999999,45&WIDTH=256&HEIGHT=256',
    type: 'GET',
    dataType: 'json',
    success: function(result) {
        console.log("yesss")
    }
});

The result:

scheme http
host thredds.socib.es
filename /thredds/wms/operational_models/oceanographical/hydrodynamics/model_run_aggregation/wmop_3d/runs/wmop_3d_RUN_2020-09-06T00:00:00Z
LAYERS sst_gradients
ELEVATION 0
TIME 2020-09-06T12:00:00.000Z
TRANSPARENT true
COLORSCALERANGE -50,50
NUMCOLORBANDS 20
LOGSCALE false
SERVICE WMS
VERSION 1.1.1
REQUEST GetMetadata
item minmax
FORMAT image/png
SRS EPSG:4326
BBOX -5.6843418860808e-14,37.5,7.4999999999999,45
WIDTH 256
HEIGHT 256
Address 130.206.32.69:80
Status 403

Can anyone help me to solve this problem?

Cheers,

Mostafa

from thredds.

It is quite possible that the CORS settings from tomcat and the CORS settings in the TDS are interfering with each other. I would recommend not using the TDS CORS settings and putting them in place higher in the stack, such as in Tomcat. As always, when dealing with CORS in production, make sure to consult the person or group in charge of the network and domain on how best it should be implemented. Having CORS headers show up on network scans without notice usually leads to bad times.

from thredds.