Skip to main content
Formbase is designed to accept submissions from any frontend. The /s/<form-id> endpoint includes permissive CORS headers so you can post from different domains without extra configuration. This is especially useful for static sites, Jamstack apps, and client-side forms.

​
Default CORS behavior

  • Access-Control-Allow-Origin: *
  • Access-Control-Allow-Methods: POST, OPTIONS
  • Access-Control-Allow-Headers: Content-Type, Authorization
Formbase also responds to OPTIONS preflight requests.
If you self-host and want stricter CORS rules, place Formbase behind a proxy that enforces allowed origins.