Symptoms
CORS header in SmartObject REST service Response Header.
Diagnoses
K2 does not currently support CORS header in SmartObject REST service Response Header.
Resolution
CORS settings for the SmartObject REST services are not supported. The reason for this, is that the REST service is hosted in the host server, instead of IIS which means there is no web.config file to configure CORS settings. There is also no config entry that you can set in the K2HostServer.exe.config file to configure CORS. CORS is enforced by browsers. So if you have a site that is in a different domain, one way to get past the CORS limitation is to make the REST call server side with no browser/client interaction, and then pass the results back to the client.