I’m running Tutor in development mode. When I run the command
tutor config save --set CORS_ORIGIN_ALLOW_ALL=True
the config.yml file is updated, but the changes don’t seem to take effect. I also checked the file /openedx/edx-platform/lms/envs/tutor/development.py, but the value there is not updated. Am I missing a step?
Just please bear in mind that if you set CORS_ORIGIN_ALLOW_ALL=True in your production environment, your users will be vulnerable to attacks from other websites. You should be using CORS_ORIGIN_WHITELIST instead, unless you specifically want to expose your site to severe security issues.