bug: Access to script at been blocked by CORS policy

[dep]

Describe your issue?

I've seen this issue working locally with the Requestly extension in Chrome.

Access to script at been blocked by CORS policy. Permission was denied for this request to access http://localhost/reportinglocalhost.js redirected from https://djm113gw5h5.cloudfront.net/assets/reporting.js) from origin https://ww.<my-site>.net

It's almost as if Chromium is tightening up this rule somehow.

For what it's worth I can circumvent it by launching chrome like this, but it feels wrong:

open -na "Google Chrome" --args \
  --user-data-dir="/tmp/chrome-dev" \
  --disable-web-security \
  --disable-site-isolation-trials

Repro steps

1. Use Requestly in Chrome
2. Set up a redirect rule
3. Reload

What Requestly tool were you using?

• Extension
• Desktop-App
• Android SDK
• Selenium

Your Environment

latest

Requestly Version

latest

Error screenshot

No response

[vithano]

you can disable this flag
chrome://flags/#local-network-access-check