Problem type
Cross-origin request
cross-origin
What it means
A write (POST, PUT, PATCH, DELETE) to the hosted pages' /flow API with a foreign Origin, with Origin: null, or with neither Origin nor Sec-Fetch-Site: same-origin. Nothing is processed.
What to do
The /flow API serves the hosted pages on the issuer's own origin and nothing else. Send people to the hosted pages rather than calling it from your site.