Cross-site communication directives (CORS policy) for Apache - does not work on iOS. What is done wrong?

Question

Apache HTTP Server

Hi 6) I have image files

on my hosting in the https://my-migration.com/files/images/social/ folder. I try to access them from the bulgaria.my-migration.com subdomain, but the files are not uploaded and I get the following warning:

Access to fetch at ' https://my-migration.com/files/images/social/viber.jpg ' from origin ' https://bulgaria.my-migration.com ' has been blocked by CORS policy: No 'Access -Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

I added the following commands to htaccess:

<FilesMatch "\.(jpg|png)$">
  SetEnvIf Origin "^http(s)?://(.+\.)?(glideapps\.com|my\-migration\.com)$" origin_is=$0
  Header always set Access-Control-Allow-Origin %{origin_is}e env=origin_is
</FilesMatch>

Also, on the recommendation of the hosting support, I added another option:

Header set Access-Control-Allow-Origin "https://bulgaria.my-migration.com"

But both options work "every other time" - everything is ok on a PC under Windows, but not on the iPhone.

The question is - what is done wrong or what needs to be additionally taken into account for iOS?

Answer 1

Header set Access-Control-Allow-Methods: "GET, OPTIONS"

explicitly specify which methods are subject to CORS headers