4 ms·

My site has the Access-Control-Allow-Origin:* header set. Try the same thing on the Beaker site in the devtools for https://example.com https://example.com.

by pfraze 8y ago

My site has the Access-Control-Allow-Origin:* header set. Try the same thing on the Beaker site in the devtools for https://example.com https://example.com. fetch('https://beakerbrowser.com/dat.json') .then(response => response.text()) .then(str => console.log(str)) It should fail

bhritchie 8y ago
It is failing for me because of the content security policy, which is a different thing.
- pfraze 8y ago
  That's the case on HN. Example.com doesnt have CSPs setup so it's CORS that causes the issue.