MountainStorm CORS Issue

We have seen problems with Frame plugin interfering with this svg. We'll try some cases here.

http://livecode.world/assets/graph/graphviz.html Remote case. See in full screen

I forked the Graphs page where David stored the html and its dependents. I further forked individual assets used by this example in order to sidestep reported CORS errors.

http://ward.dojo.fed.wiki/assets/graph/graphviz.html Same origin case. See in full screen

I can demonstrate here that Frame 0.8.6 works but both 0.8.7 and 0.8.8 fail with the same CORS error fetching full_contract.svg from same origin.

wiki-plugin-frame

Tip: to avoid confusion, use the browser's 'Empty Cache and Hard Reload after installing a different plugin.

Both case fail with this error:

Access to XMLHttpRequest at 'http://ward.dojo.fed.wiki/assets/graph/full_contract.svg' from origin 'null' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: It does not have HTTP ok status.

Traceback from CORS error.

The problem is unique to the sandboxed Frame as both versions work fine when viewed from their own tab.