Add steamcdn-a.akamaihd.net to CORS allowed domains.

[m4dEngi]

Because steam store pages with missing resources are slightly annoying.

[Brujeira]

Well that's something at your end because it's working fine for everyone else. How exactly are you viewing the store? Through a normal browser?

[m4dEngi]

Ursprungligen skrivet av Brujeira:

Well that's something at your end because it's working fine for everyone else. How exactly are you viewing the store? Through a normal browser?

https://imgur.com/FbMWoCn.png
Like this. Think i should disable CORS in Firefox settings?

[cSg|mc-Hotsauce]

I'd disable it.

[m4dEngi]

Ursprungligen skrivet av cSg|mc-Hotsauce:

I'd disable it.

:qr:

While you're on your way to disable it, would you kindly share with us the cd-key of the first game you activated on steam (with a photo ofc)?

[cSg|mc-Hotsauce]

Ursprungligen skrivet av m4dEngi:

Ursprungligen skrivet av cSg|mc-Hotsauce:

I'd disable it.

While you're on your way to disable it, would you kindly share with us the cd-key of the first game you activated on steam (with a photo ofc)?

Tell me why you need it enabled.

[m4dEngi]

Ursprungligen skrivet av cSg|mc-Hotsauce:

Ursprungligen skrivet av m4dEngi:

While you're on your way to disable it, would you kindly share with us the cd-key of the first game you activated on steam (with a photo ofc)?

Tell me why you need it enabled.

:qr:

Dunno. For some reasons i prefer to leave security features (enabled by default in modern browsers) enabled.

And if it's not needed why VALVe enforces it on their end? ( maybe they're afraid of harmless XSS attacks? )

I know you're quite special kind of VALVe cultist, so here's a screenshot of response header from store remote server https://imgur.com/86O3Ffq.png

[Brujeira]

Ursprungligen skrivet av m4dEngi:

Ursprungligen skrivet av cSg|mc-Hotsauce:

Tell me why you need it enabled.

:qr:

Dunno. For some reasons i prefer to leave security features (enabled by default in modern browsers) enabled.

And if it's not needed why VALVe enforces it on their end? ( maybe they're afraid of harmless XSS attacks? )

Yeah, but you've not just left the default ones enabled, have you? I'm running the latest FireFox with NoScript and I'm not getting these errors. How many different security addons and script blockers have you installed?

[Spawn of Totoro]

Ursprungligen skrivet av Brujeira:

Yeah, but you've not just left the default ones enabled, have you? I'm running the latest FireFox with NoScript and I'm not getting these errors. How many different security addons and script blockers have you installed?

Same here. Ublock Origin and No-Script.

I have to enable two items in No-Script as it is set to block everything, but no error in FireFox and FireFox has all default settings enabled.

[m4dEngi]

Ursprungligen skrivet av Spawn of Totoro:

Ursprungligen skrivet av Brujeira:

Yeah, but you've not just left the default ones enabled, have you? I'm running the latest FireFox with NoScript and I'm not getting these errors. How many different security addons and script blockers have you installed?

Same here. Ublock Origin and No-Script.

I have to enable two items in No-Script as it is set to block everything, but no error in FireFox and FireFox has all default settings enabled.

https://store.steampowered.com/sale/halloween2020 so this one loads perfectly for you, right? No broken images, no errors, nothing, right?

Just tested in default Chromium with no plugins, same result as with FF.

[Brujeira]

Ursprungligen skrivet av m4dEngi:

Ursprungligen skrivet av Spawn of Totoro:

Same here. Ublock Origin and No-Script.

I have to enable two items in No-Script as it is set to block everything, but no error in FireFox and FireFox has all default settings enabled.

https://store.steampowered.com/sale/halloween2020 so this one loads perfectly for you, right? No broken images, no errors, nothing, right?

Just tested in default Chromium with no plugins, same result as with FF.

Loads perfectly fine. This is your home PC rather than a work PC, right?

[Spawn of Totoro]

Ursprungligen skrivet av m4dEngi:

Ursprungligen skrivet av Spawn of Totoro:

Same here. Ublock Origin and No-Script.

I have to enable two items in No-Script as it is set to block everything, but no error in FireFox and FireFox has all default settings enabled.

https://store.steampowered.com/sale/halloween2020 so this one loads perfectly for you, right? No broken images, no errors, nothing, right?

Just tested in default Chromium with no plugins, same result as with FF.

Loads fine for me.

Did you try clearing the cache?

If something is loading too fast, it may display errors a few times as it tries, then works fine. Even if get error, if the site works, then there is likely no real issue.

Looking up the error as well, it isn't a setting in FF, but a general Web error.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin?utm_source=devtools&utm_medium=firefox-cors-errors&utm_campaign=default

[m4dEngi]

Ursprungligen skrivet av Spawn of Totoro:

Ursprungligen skrivet av m4dEngi:

https://store.steampowered.com/sale/halloween2020 so this one loads perfectly for you, right? No broken images, no errors, nothing, right?

Just tested in default Chromium with no plugins, same result as with FF.

Loads fine for me.

Did you try clearing the cache?

If something is loading too fast, it may display errors a few times as it tries, then works fine. Even if get error, if the site works, then there is likely no real issue.

Looking up the error as well, it isn't a setting in FF, but a general Web error.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin?utm_source=devtools&utm_medium=firefox-cors-errors&utm_campaign=default

Of course it's not a FF error, it's a server enforcing content security policy and a missing static resources domain in allowed origins list in server reply header.

[Brujeira]

Ursprungligen skrivet av m4dEngi:

Ursprungligen skrivet av Spawn of Totoro:

Loads fine for me.

Did you try clearing the cache?

If something is loading too fast, it may display errors a few times as it tries, then works fine. Even if get error, if the site works, then there is likely no real issue.

Looking up the error as well, it isn't a setting in FF, but a general Web error.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin?utm_source=devtools&utm_medium=firefox-cors-errors&utm_campaign=default

Of course it's not a FF error, it's a server enforcing content security policy and a missing static resources domain in allowed origins list in server reply header.

Which is all supposed to be handled at your end by the browser...

[Spawn of Totoro]

Ursprungligen skrivet av m4dEngi:

Of course it's not a FF error, it's a server enforcing content security policy and a missing static resources domain in allowed origins list in server reply header.

And does not seem to effect the page, so a non-issue.

[m4dEngi]

Ursprungligen skrivet av Brujeira:

Ursprungligen skrivet av m4dEngi:

Of course it's not a FF error, it's a server enforcing content security policy and a missing static resources domain in allowed origins list in server reply header.

Which is all supposed to be handled at your end by the browser...

Exactly. It's correctly handled on my end resulting in missing images. Sure i can live without floating candles on store pages...

I love how you instantly try to shift the blame to users, never change, guys.