Cross-Origin Read Blocking (CORB) blocked cross-origin response
See original GitHub issueI’m initialising a player like so :
// HTML
<iframe
class="home__hero__video"
src="https://player.vimeo.com/video/MYVIDEOIDHERE?background=1&autoplay=0&loop=1&byline=0&title=0"
frameborder="0"
webkitallowfullscreen
mozallowfullscreen
allowfullscreen>
</iframe>
// JS - webpack + babel
import Player from '@vimeo/player';
class HomeFn {
constructor() {
this.initVideo();
}
initVideo() {
const player = new Player(document.querySelector('.home__hero__video'));
player.on('loaded', () => {
player.play();
});
}
}
export default HomeFn;
And I get this warning in my console :
Cross-Origin Read Blocking (CORB) blocked cross-origin response https://fresnel.vimeocdn.com/add/player-stats?session-id=6382900865a72ab0f6813cecc33d0ebc654a744d1556634198 with MIME type application/json. See https://www.chromestatus.com/feature/5629709824032768 for more details.
How can I solve this console warning ? Thanks for your help.
Issue Analytics
- State:
- Created 4 years ago
- Comments:13 (4 by maintainers)
Top Results From Across the Web
Cross-Origin Read Blocking for Web Developers
Cross -Origin Read Blocking (CORB) is a new web platform security feature that helps mitigate the threat of side-channel attacks (including Spectre). It...
Read more >Cross-Origin Read Blocking (CORB)
This document outlines Cross-Origin Read Blocking (CORB), an algorithm by which dubious cross-origin resource loads may be identified and blocked by web ...
Read more >Cross-Origin Read Blocking (CORB) - Stack Overflow
Select the problem request in Fiddler · Open the AutoResponder tab · Check Unmatched requests passthrough · Check Enable Rules.
Read more >Response Blocked by Chrome's Cross-Origin Read Blocking ...
My Chrome browser is blocking the response from my API POST call and giving me the following error: Cross-Origin Read Blocking (CORB) blocked...
Read more >What is CORB? - DEV Community
Cross-Origin Read Blocking (CORB) prevents the browser from receiving a cross-origin data resource if it has an X-Content-Type-Options: nosniff ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

@jstortz My site makes use of a carousel that contains multiple vimeo videos. For every instance that is blocked CORB; the body response is empty & as such will not load the videos altogether.
The CORB documentation quoted above by @luwes does state that CORB may replace the body with an empty response in some scenarios.
@iit07ajay Can you file a separate issue for this if it’s related to the player.js library?