Build with Google AI - Build Preview Fails to Load - CORS Failure - Potential Vulnerabilities

Gemini API
, ,
1

GET https[:]//ai[.]studio/index.tsx net::ERR_FAILED 301 (Moved Permanently)

ccess to script at ‘/index.tsx’ from origin ’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

c1093973-487b-4342-a17a-fc9cb8a366c9:1 Access to script at ‘https[:]//esm[.]sh/@google/genai@^1.34.0’ from origin has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

Access to script at ‘https[:]//esm[.]sh/react@^19.2.3’ from origin has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

—-

Did research. This issue keeps popping up and getting resolved by teams relevant to security. Sooooo, probably a vuln. Either way, AI Studio is now broken. It can’t even make a new project. I can’t submit feedback. Good luck Mandiant!

5

Hi @mitospha ,

Welcome to the Forum!
Thank you for reaching out! Could you please elaborate more on the issue you are facing? This will help us better understand and analyze the problem so we can provide you with a more accurate and helpful response.

Thanks!

7

I am also facing this issue while preview the react app, I have re-structured the project code into src/ directory:

Access to script at ‘https://ai.studio/src/index.tsx’ from origin ‘https://18skwhjotk39mh0r3x4tql413g0u3fgnf3r3m8yu05rm30musr-h852644758.scf.usercontent.goog’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.