yes i shared it with them. in the reply they gave(below), they mentioned they allowed some verb method from IIS. and asked me to add given codeset to web config file.
1)we have done what they told us right?
I was able to replicate the issue while deleting the Dynamic Content. Here we see HTTP headers GET, HEAD, OPTIONS, TRACE are allowed but CORS DELETE Method disallowed. I have added 'DELETE' verb method from IIS>> 'Handlers Mappings'. However, it still failed to resolve.
+++++++++++++++++++ Request URL https://www.iduminalanka.com/administrator/index.php?option=com_sppagebuilder&task=/collections.delete&id=1&_context=collections&force=0&_method=delete×tamp=1752112929001 Request Method DELETE Status Code 405 Method Not Allowed Remote Address 104.21.64.1:443 Referrer Policy strict-origin-when-cross-origin allow GET, HEAD, OPTIONS, TRACE +++++++++++++++++++
You can try adding the following lines of code in your web config file
system.webServer> <security> <requestFiltering> <verbs allowUnlisted="false"> <add verb="DELETE" allowed="true" /> </verbs> </requestFiltering> </security> AND
<modules> <remove name="WebDAVModule" /> </modules> <handlers> <remove name="WebDAV" /> </handlers> Try to verify deleting the dynamic data and let us know if you still see issues.