ccess to font at '
You must be registered to see the links
' from origin '
https://f95zone.to' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Private-Network' header was present in the preflight response for this private network request targeting the `local` address space.
127.0.0.1:57095/assets/mdi-webfont.ttf:1
GET
You must be registered to see the links
net::ERR_FAILED
injected.js:2 =====>>>>: Detect Risk website detectWebsiteRiskLevel
Found it. it happens even if you disable shield up.. Anyone know how to get around this?
willyjl: I found this site talking about it. mean anything to you? I am not a web developer. (or a developer of any sort).
You must be registered to see the links
more info:
- A site requested a resource from a network that it could only access because of its users' privileged network position. These requests expose devices and servers to the internet, increasing the risk of a cross-site request forgery (CSRF) attack, and/or information leakage.
To mitigate these risks, Chrome will require non-public subresources to opt-into being accessed with a preflight request and will start blocking them in Chrome 130 (October 2024).
To fix this issue, ensure that response to the preflight request for the private network resource has the Access-Control-Allow-Private-Network header set to true.
Administrators can make use of the InsecurePrivateNetworkRequestsAllowed and InsecurePrivateNetworkRequestsAllowedForUrls enterprise policies to temporarily disable this restriction on all or certain websites.
- Affected Resources
- 1 request
Request | Status | Preflight Request | Invalid Value (if available) | Initiator Address | Initiator Context |
mdi-webfont.ttf | blocked | mdi-webfont.ttf | | Public | secure |
- Learn more: Private Network Access