CORS issue because of Brave Shields

Consolidated Test plan from all related issues

Test plan

1. Open https://eslint-config-development.netlify.com.
2. Console should not log any CORS erros

---

1. Visit chart.js
2. Ensure chats are not broken
3. Console should not log any CORS erros

---

1. Visit https://www.wikiloc.com/mountain-biking-trails/la-quinta-cove-226486
2. Ensure maps shows correctly for both Satellite and Map
3. Console should not log any CORS erros

---

1. Open a new issue on Github with default shields settings
2. Try to upload an image
3. Should be able to upload image without any issues
4. Console should not log any CORS erros

---

1. Visit www.reddit.com
2. Locate a posted video hosted by reddit (https://www.reddit.com/r/Seattle/comments/9uhb5h/snoqualmie_falls_with_foliage_thanks_wa/)
3. Ensure video plays without any issue

---

1. Visit https://d.tube and open any video
2. Video should start streaming
3. Console should not log any CORS erros

---

1. Go to namecheap.com
2. Search for a domain
3. Search result should show up
4. Console should not log any CORS erros

---

1. Go to https://www.skill-capped.com/
2. Login shuold be successful
3. Console should not log any CORS erros

Original issue Description

I have a website deployed on netlify that makes requests to the server that deployed to heroku, they both are on different domains. I enabled CORS in my server setup but I keep getting error Access to fetch at 'https://eslint-config-api-server.herokuapp.com/' from origin 'https://eslint-config-development.netlify.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: Redirect is not allowed for a preflight request.. Works like that only in Brave.

Steps to Reproduce

1. Open https://eslint-config-development.netlify.com.
2. Open console.

Brave version (brave://version info)

0.56.15 Chromium: 70.0.3538.110 (Official Build) (64-bit)

Reproducible on current release:

• Does it reproduce on brave-browser dev/beta builds? I don’t know, I don’t use such builds.

Website problems only:

• Does the issue resolve itself when disabling Brave Shields? Yes.
• Is the issue reproducible on the latest version of Chrome? No.

[jamendub]

Updated to 0.58.21 on Mac OS and it now works perfectly ! I love u guys 😉 Keep the good work up !!!

[m-ret]

I am having this issue right now on Version 0.63.48 Chromium: 74.0.3729.108 (Official Build) (64-bit).

Access to fetch at ‘http://some/api/url’ from origin ‘http://localhost:3000’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. If an opaque response serves your needs, set the request’s mode to ‘no-cors’ to fetch the resource with CORS disabled.