You can paste the following into the GitHub issue description:
Description
The Donate page on the VERT website is currently broken due to a CORS (Cross-Origin Resource Sharing) issue.
Steps to Reproduce
- Open https://vert.sh/about/
- Scroll to the Donate to VERT section.
- Click Donate $10.00 USD.
Expected Behavior
The donation page should open successfully or create a billing session so the user can complete the payment.
Actual Behavior
The request fails, and no donation flow starts.
Browser Console shows:
Access to fetch at 'https://donations.vert.sh/billing'
from origin 'https://vert.sh'
has been blocked by CORS policy:
No 'Access-Control-Allow-Origin' header is present on the requested resource.
Additional errors:
Failed to load resource: net::ERR_FAILED
Uncaught (in promise) TypeError: Failed to fetch
Possible Cause
The endpoint
https://donations.vert.sh/billing
does not return the required CORS headers, causing browsers to block the request.
It appears that either:
Access-Control-Allow-Origin is missing.
- The server is not responding correctly to the preflight (OPTIONS) request.
- The reverse proxy/CDN configuration is not forwarding the required CORS headers.
Suggested Fix
Ensure the donation API returns appropriate CORS headers, for example:
Access-Control-Allow-Origin: https://vert.sh
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Also ensure the endpoint correctly handles OPTIONS preflight requests.
Environment
Console Screenshot Attached

You can paste the following into the GitHub issue description:
Description
The Donate page on the VERT website is currently broken due to a CORS (Cross-Origin Resource Sharing) issue.
Steps to Reproduce
Expected Behavior
The donation page should open successfully or create a billing session so the user can complete the payment.
Actual Behavior
The request fails, and no donation flow starts.
Browser Console shows:
Additional errors:
Possible Cause
The endpoint
does not return the required CORS headers, causing browsers to block the request.
It appears that either:
Access-Control-Allow-Originis missing.Suggested Fix
Ensure the donation API returns appropriate CORS headers, for example:
Also ensure the endpoint correctly handles
OPTIONSpreflight requests.Environment
Console Screenshot Attached