[tor-bugs] #18080 [Applications/Tor Browser]: CORS header 'Access-Control-Allow-Origin' missing

[Tor Bug Tracker & Wiki]

#18080: CORS header 'Access-Control-Allow-Origin' missing
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tbb-usability-website, ff60-esr-     |  Actual Points:
  will-have                                      |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by rnoir):

 I'm seeing these errors on stocktwits.com:
 {{{
 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the
 remote resource at
 https://api.stocktwits.com/api/2/streams/watchlist/static.json?since=137020866&filter=top.
 (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).
 }}}
 This is running 8.5a1 on Ubuntu 18.04. If I click "New Tor Circuit for
 this Site", sometimes I'll get a few minutes of browsing before the errors
 come back.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18080#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online