Adjust CORS Settings: Add Access-Control-Allow-Origin-Headers
Is your enhancement related to a problem? Please describe. To allow Visualize Iframes to be correctly integrated and rendered in LivingDocs, the CORS settings need to be adjusted to support Access-Control-Allow-Origin-Headers.
Describe alternatives you've considered Having Visualize.admin.ch be whitelisted (was initially requested, however the feedback was to adjust the CORS settings)
Use cases and impact By adding the correct Access-Control-Allow-Origin header to the responses, the required domains should be granted access to the resource, potentially resolving the issue where Visualize iframes are not correctly integrated into living docs using the Free HTML block.
Additional context Add any other context or screenshots about the feature request here. If the enhancement concerns the editor, please provide a dataset, class of datasets. If the enhancement concerns publication, please provide an example of where the chart is published.
Source: Email from Matthias, BAKOM on 05.08.2025, and discussion in Monthly Call on 05.08.2025