commit 64a8551d90111dbf23105c24abdafc855bfb998c
author Tao Zhou <taoalpha@google.com> Mon Mar 09 07:42:53 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Mar 09 07:42:53 2020 +0000
tree c100c6087bc28c0506a500530d7039ef9bb51b1a
parent eb47d6c2b870b6acae7b6b42378d1eff0daaec56
parent ae80111061b383a0d044df9f401813701df4f6c9

Merge "Set crossorigin="anonymous" when load plugin js files"

polygerrit-ui/app/elements/shared/gr-js-api-interface/gr-plugin-loader.js

diff --git a/polygerrit-ui/app/elements/shared/gr-js-api-interface/gr-plugin-loader.js b/polygerrit-ui/app/elements/shared/gr-js-api-interface/gr-plugin-loader.js
index 1359ce8..d44fa17 100644
--- a/polygerrit-ui/app/elements/shared/gr-js-api-interface/gr-plugin-loader.js
+++ b/polygerrit-ui/app/elements/shared/gr-js-api-interface/gr-plugin-loader.js
@@ -359,6 +359,10 @@
       const el = document.createElement('script');
       el.defer = true;
       el.setAttribute('src', url);
+      // no credentials to send when fetch plugin js
+      // and this will help provide more meaningful error than
+      // 'Script error.'
+      el.setAttribute('crossorigin', 'anonymous');
       el.onerror = onerror;
       return document.body.appendChild(el);
     }