3 ms·
The author mentions that <script type="module"> enforces CORS restrictions which would break with their current server settings and CDN, otherwise I think they
by wffurr 5y ago
The author mentions that <script type="module"> enforces CORS restrictions which would break with their current server settings and CDN, otherwise I think they agree with you.
- earthboundkid 5y agoThis aspect of JS makes no sense to me. Why add a CORS restriction to modules mode? It doesn't plausibly address any security hole, since nomodules mode is still around. It's just a big pain in the ass for no particular benefit, AFAICT.
- Ciantic 5y agoHmm, I think they should fix the CDN? I think if they just refer their script e.g. from https://www.jsdelivr.com/ https://www.jsdelivr.com/ it should just work? I have used bunch of modules from CDN.
- jffry 5y agoThe issue would lie with the site's CORS policy, no change to the CDN can work around that. And it's possible the author is not permitted to or does not wish to alter the CORS policy.