question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Cross-Origin Read Blocking (CORB) blocked cross-origin response

See original GitHub issue

I’m initialising a player like so :

// HTML
<iframe
  class="home__hero__video"
  src="https://player.vimeo.com/video/MYVIDEOIDHERE?background=1&autoplay=0&loop=1&byline=0&title=0"
  frameborder="0"
  webkitallowfullscreen
  mozallowfullscreen
  allowfullscreen>
</iframe>

// JS - webpack + babel
import Player from '@vimeo/player';
class HomeFn {
  constructor() {
    this.initVideo();
  }

  initVideo() {
    const player = new Player(document.querySelector('.home__hero__video'));
    player.on('loaded', () => {
      player.play();
    });
  }
}
export default HomeFn;

And I get this warning in my console :

Cross-Origin Read Blocking (CORB) blocked cross-origin response https://fresnel.vimeocdn.com/add/player-stats?session-id=6382900865a72ab0f6813cecc33d0ebc654a744d1556634198 with MIME type application/json. See https://www.chromestatus.com/feature/5629709824032768 for more details.

How can I solve this console warning ? Thanks for your help.

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:13 (4 by maintainers)

github_iconTop GitHub Comments

3reactions
munyahcommented, May 16, 2019

@jstortz My site makes use of a carousel that contains multiple vimeo videos. For every instance that is blocked CORB; the body response is empty & as such will not load the videos altogether.

The CORB documentation quoted above by @luwes does state that CORB may replace the body with an empty response in some scenarios.

0reactions
rkrishnan8594commented, Apr 18, 2022

@iit07ajay Can you file a separate issue for this if it’s related to the player.js library?

Read more comments on GitHub >

github_iconTop Results From Across the Web

Cross-Origin Read Blocking for Web Developers
Cross -Origin Read Blocking (CORB) is a new web platform security feature that helps mitigate the threat of side-channel attacks (including Spectre). It...
Read more >
Cross-Origin Read Blocking (CORB)
This document outlines Cross-Origin Read Blocking (CORB), an algorithm by which dubious cross-origin resource loads may be identified and blocked by web ...
Read more >
Cross-Origin Read Blocking (CORB) - Stack Overflow
Select the problem request in Fiddler · Open the AutoResponder tab · Check Unmatched requests passthrough · Check Enable Rules.
Read more >
Response Blocked by Chrome's Cross-Origin Read Blocking ...
My Chrome browser is blocking the response from my API POST call and giving me the following error: Cross-Origin Read Blocking (CORB) blocked...
Read more >
What is CORB? - DEV Community ‍ ‍
Cross-Origin Read Blocking (CORB) prevents the browser from receiving a cross-origin data resource if it has an X-Content-Type-Options: nosniff ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found