CORS Policy?

Since the last updates of joomla 4.4.5 and also after I made the upgrade to joomla 5.1.3 showing the gpx file on the maps of Zh Openstreetmap no longer work. You can find the error message below in your browser (pushing F12).

Access to XMLHttpRequest at ' www.mtbtrails.nl/images/gpxfiles/Blavand-mtbroute1.gpx ' from origin ' mtbtrails.nl ' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

The strange thing is that the file is still present and that CORS is disabled within Joomla - Server. I have been messing around with settings in the .htaccess and System -HTTP Headers, but that did not help anything. What could be the cause and solution for this so that the gpx track is shown again?

Thanks, 
Pascal
 

Hi
Try to enter relative path to your file. Without protocol and site.

Or search like "Access-Control-Allow-Origin wildcard subdomains, ports, and protocols"

I tried searching several ways, but it al ended up with no workable solution. The error seems something weird.
I also tried using relative paths, but that did not work either.
But I found out, when changing the Layer Type within Zh Openstreetmap (from a path) to just GPX instead of GPX (Internal Parser), this error disappears, the map is shown on the website but without the hight profile and other information like distance etc. When I open it again and change the Layer Type it back to GPX (Internal Parser), all the info is back and there is no error.

For example: www.mtbtrails.nl/mtb-trails-fr/mountainb...-pradons-via-balazuc

Thats quite weird. Any ideas?
(for info: i don't use caching on my website)

Pascal

I just open your site and can see it all
 

Probably browser cache

But when you open

mtbtrails.nl/mtb-trails-fr/mountainbiken...-pradons-via-balazuc

You'll get error abour CORS, because it is the other name, I mean
www.mtbtrails.nl and mtbtrails.nl - it is different, you can do synonyms, but it differs.

Try to override rules (aliases) and when you go to mtbtrails.nl add www.