Bundling CORS settings into R2 is probably something Cloudflare should consider adding to the roadma
Bundling CORS settings into R2 is probably something Cloudflare should consider adding to the roadmap. 90% of people can probably hack it with the Transform Rules to add generous permissions, but there are going to be a lot of gotchas. Using Transform Rules feels very smelly.
Amazon has
Amazon has
PutBucketCors, Backblaze B2 has CORS settings in the bucket management interface, Digital Ocean Spaces also has CORS settings in the management interface. So these services can respond in a fully spec-compliant way.


