no-cors opaque request for html resource fetch blocked by CORB
问题 I'm trying to fetch html file located at url https://sub.app.test/html from https://app.test using no-cors mode but the response is blocked by CORB (cross-origin read blocking). fetch('https://sub.app.test/html', { mode: 'no-cors'}) Why? 回答1: Even though no-cors mode is used (so the response doesn't need to have Access-Control-Allow-Origin to be allowed) the request is blocked by CORB because an html content is considered a data resource (it may contain sensitive data). Any resource that has