Edge Beta, Version 92.0.902.9 CORS Error

[jturcich]

I test our Criminal Justice Client against the EDGE DEV version and yesterday when I tested I got the following error:

Access to XMLHttpRequest at 'http://localhost/justicelink/identityservice/gettermkeyjson' from origin 'http://jlink4fe.norsoftconsulting.com' has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space `local`.
jquery-3.1.1.js:9536 GET http://localhost/justicelink/identityservice/gettermkeyjson net::ERR_FAILED
send @ jquery-3.1.1.js:9536
ajax @ jquery-3.1.1.js:9143
a.ajax @ jquery-migrate-3.0.0.min.js:2
jQuery.<computed> @ jquery-3.1.1.js:9292
getTermKey @ global.js:228
(anonymous) @ global.js:175
mightThrow @ jquery-3.1.1.js:3570
process @ jquery-3.1.1.js:3638
setTimeout (async)
(anonymous) @ jquery-3.1.1.js:3676
fire @ jquery-3.1.1.js:3305
fireWith @ jquery-3.1.1.js:3435
fire @ jquery-3.1.1.js:3443
fire @ jquery-3.1.1.js:3305
fireWith @ jquery-3.1.1.js:3435
ready @ jquery-3.1.1.js:3915
completed @ jquery-3.1.1.js:3925
jlink4fe.norsoftconsulting.com/:1 Access to XMLHttpRequest at 'http://localhost/justicelink/identityservice/getversion' from origin 'http://jlink4fe.norsoftconsulting.com' has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space `local`.
jquery-3.1.1.js:9536 GET http://localhost/justicelink/identityservice/getversion net::ERR_FAILED

The client works in IE, EDGE, Chrome and Firefox.  We need a resolution to this issue.

[#2]

Tagging @johnjansen, to please further look into this issue.

[#3]

You can manually control this via edge://flags/#block-insecure-private-network-requests for the time being. Longer term, you will need to start using HTTPS on the outer page.

Eventually, this will be working as intended, and you'll see the same behavior in Chrome depending on experimental flighting. (Learn more about experiments at https://textslashplain.com/2017/10/18/chrome-field-trials/ )

https://chromestatus.com/feature/5436853517811712

Currently, this change is being considered to ship on-by-default in Chromium version 93. https://groups.google.com/a/chromium.org/g/blink-dev/c/cPiRNjFoCag/m/vGCrLvVqAAAJ