最近项目上线后,遇到一个奇怪的问题,部分客户的电脑浏览器提示:“Access to image at 'xxx' from origin 'xxx' has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space 'private'.”。看下了请求响应报文Access-Control-Allow-Origin: *,未限制请求域。后来发现这是浏览器对网络请求做了限制,多发生于Chrome94版本,解决方案如下:
打开chrome一个新的标签页,输入“chrome://flags/#block-insecure-private-network-requests”,跳转到设置界面,将Block insecure private network requests属性值改为disabled。
保存设置,重启浏览器,项目调试正常。