Cross Origin Assets not loading on Playground via AJAX

[jtbaker]

Describe the bug

I'm not sure that this is actually a bug, but it does seem like a nice thing to be able to do. Most mapping SDKs load mercator tiles with AJAX from servers on other domains. I think due to the CSP on the playground page, it is preventing any of those assets from being loaded due to them being cross origin.

Example (watch network tab): https://marimo.app/?slug=l1ny4w
Working version of the same package in their docs. https://python-visualization.github.io/folium/latest/getting_started.html

Environment

Exhibits on Playground (link attached above).

Code to reproduce

No response

[mscolnick]

Yea, this is not actually a bug per-say. It is a CORS issue, with cross-origin-resource-policy:, which we enable for some wasm features. If you own the server, you can change the CORS hearers to be more lenient and allow requests from other sites.

If you don't own the server, we do host a corsproxy which you can use (but people would recommend to not pass sensitive data through it). https://corsproxy.marimo.app/<url>