[bhritchie]

It is failing for me because of the content security policy, which is a different thing.

[pfraze]

That's the case on HN. Example.com doesnt have CSPs setup so it's CORS that causes the issue.