网站修改https后 阿里云OSS跨域报错：Access to XMLHttpRequest at ‘...‘ ... blocked by CORS policy: No ‘Access-Control-Allow

网页浏览器具体报错内容：

Access to XMLHttpRequest at 'https://xxx.oss-cn-hangzhou.aliyuncs.com/' from origin 'http://127.0.0.1' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

解决方法：在OSS控制台创建跨域规则

在创建跨域规则中，

将来源设置为https://www.XXXXXXX.com

1. 允许Methods全部勾选

2. 允许Headers设置为*

3. 暴露Headers设置为ETag和x-oss-request-id

4. 缓存时间设置为0

5. 选中返回Vary: Origin。