When attempting to configure a custom widget in Web AppBuilder for ArcGIS in Portal for ArcGIS, clicking OK does not complete the configuration process. Instead, nothing happens, and the following error is returned in the web browser developer tools console:
Error: Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remove resource at https://<custom widget directory>/widget/manifest.json (Reason: CORS header 'Access-Control-Allow-Origin' missing).
Note: Custom widgets are stored on a web server and are accessed through a web address.
This issue occurs when the response headers sent from Portal for ArcGIS cannot access the Java libraries storing the custom widgets.
Follow the steps listed below to resolve the issue:
Name: Access-Control-Allow-Origin Value: *