Probe a target dev server for opaque-origin CORS support.
Sends Origin: null explicitly — a browser cannot forge that header, but the Paja server can, which is why the probe runs server-side.
Origin: null
Absolute target URL served by the napplet dev server.
Fetch implementation; defaults to the global fetch.
fetch
Diagnostic describing whether the sandboxed frame can load assets.
const diagnostic = await probeTargetCors('http://127.0.0.1:5173/');if (diagnostic.status === 'blocked') console.warn(diagnostic.hint); Copy
const diagnostic = await probeTargetCors('http://127.0.0.1:5173/');if (diagnostic.status === 'blocked') console.warn(diagnostic.hint);
Probe a target dev server for opaque-origin CORS support.
Sends
Origin: nullexplicitly — a browser cannot forge that header, but the Paja server can, which is why the probe runs server-side.