`adjustImage` fails on Google Images page due to CORS header ‘Access-Control-Allow-Origin’ missing

[ajtadeo]

Getting this error on Google Images and many other dynamically rendered pages

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://encrypted-
tbn2.gstatic.com/faviconV2?url=https://pngtree.com&client=VFE&size=16&type=FAVICON&fallback_opts=TYPE,SIZE,URL&nfrp=2. 
(Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 200.

The response to the CORS request is missing the required Access-Control-Allow-Origin header, which is used to determine whether or not the resource can be accessed by content operating within the current origin.

see mozilla docs for more

Possible solutions:

• implement node server to run alongside extension to fetch image content
  • https://stackoverflow.com/questions/21291617/embedding-node-js-in-a-firefox-extension-and-running-a-server-in-browser
  • this is a weird way to handle this problem tho
• implement P2P connection with extension to fetch image content
  • https://stackoverflow.com/questions/23959912/ajax-cross-origin-request-blocked-the-same-origin-policy-disallows-reading-the
  • probably the better choice?? not sure what this means tho

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin

[ajtadeo]

this project has the same error: kevmo314/magic-copy#29

might just be a firefox issue

[ajtadeo]

mainfest.json permissions docs

Host permissions are specified as match patterns, and each pattern identifies a group of URLs for which the extension is requesting extra privileges. For example, a host permission could be "://developer.mozilla.org/".

The extra privileges include:

• XMLHttpRequest and fetch access to those origins without cross-origin restrictions (even for requests made from content scripts)

in our mainfest.json we have:

"permissions": [
    "activeTab",
    "storage",
    "tabs",
    ["*://*/*"]
  ],

which allows all urls so I'm not sure why this isn't being applied