[pfraze]

That's the case on HN. Example.com doesnt have CSPs setup so it's CORS that causes the issue.