Access to script at '[http://localhost:5173/src/background/index.js] has been blocked by CORS

[kpripper]

Access to script at '[http://localhost:5173/src/background/index.js] from origin 'chrome-extension://caapplnpkaphcokmjfaboianmbigfdcf' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

How is that possible? The extension doesn’t have access to itself?

[eneko0513]

@kpripper
Hello.
This issue is caused by another package used in this extension.
The discussion can be found at:
crxjs/chrome-extension-tools#971

For a quick fix, you can add host_permissions: ['<all_urls>'] to your manifest and add the following to your vite.config:

    legacy: {
      skipWebSocketTokenCheck: true,
    },

This appears to eliminate the error (it disappeared in my environment), though it's unclear whether this poses any security risks.