According to this document, https://enterprise.arcgis.com/en/portal/latest/administer/windows/restrict-cross-domain-requests-to-... Portal will allow cross-domain request from any web application.
Since the server is upgraded from 10.6.1 to 10.7.1 yesterday, it is blocking all CORS requests.
Strange thing is that even if I set a specific domain via Organization > Settings > Security it won't have any effect.
Is there anyone who has experienced the same thing?
How can I make this simple app working? https://gbsk-kisti.s3.ap-northeast-2.amazonaws.com/EsriRequest.html