I m attempting to use the --rpc-cors flag to specify certain domains that are allowed to send requests to my chain (localhost - substrate-node-template). However, regardless of how I use this flag, I am still able to access my blockchain on https://polkadot.js.org/. Is this the correct flag for blocking external access? Am I using this flag correctly, or should I combine it with another one? Example using "./target/release/node-template --force-authoring --alice --tmp --rpc-cors=https://mywebsite.com,https://myothersite.com"

  • I believe you can access it because if you were running both polkadot.js.org and the node on the same computer, they share the same origin.
    – Alex Bean
    Commented Sep 14, 2023 at 7:07


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.