Thanks for letting us know. Canary uses a different url and origin so you’d have to whitelist it on the server side (may not be possible in some cases)
I’m curious, how is the CORS working for you with the regular domain? Have you whitelisted it or are they on the same domain?