3 ms·
Correct me if I'm wrong, but this should still work if you write your own extension, right?
by Yaina 4y ago
Correct me if I'm wrong, but this should still work if you write your own extension, right?
- zamubafoo 4y ago> [...] to improve the isolation of data between different origins, cross-origin requests are no longer possible from content scripts, unless the destination website opts in via CORS. If the server doesn't supply your target domain in the CORS header, the request should fail if my understanding is correct. If it is this would allow a website like YouTube to block SponsorBlock from loading it's data. There might be ways to bypass this but for me it's just a side project, so I haven't really looked too deep into it.
- ianbicking 4y agoYou just need to make the request from something that isn't a content script, like a background page