CORS Errors

Symptom

Browser console shows: Access to fetch has been blocked by CORS policy

Cause

Your storefront domain is not in the allowed origins list.

Fix

1. Go to Settings → Security in the dashboard
2. Add your domain to Allowed Origins
3. Include both with and without www
4. For local development, add http://localhost:3000

See CORS & Allowed Origins for details.