问题
It is a good security standard, I'd say, it stops websites from loading shady stuff from other websites on your browser. However, when developing, it's complete hell for any application that uses AJAX (that includes LESS, W3Data and Web Components polyfill, to name a few), since the browser thinks I'm calling from outside (since there's no server).
I know that you can disable browser security, but that has two problems: first, if I'm correct, it disables any kind of security Chrome offers and second, it works globally, both in the web and local. Isn't it possible to just tell Chrome that it's safe if it involves only local HTMLs (maybe making it activate CORS within local files)?
来源:https://stackoverflow.com/questions/42863722/google-chrome-disable-same-origin-policy-in-local-files-only