Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

CORS error. html page cannot access assets folder in parent directory (Firefox, LiveServer, Windows 11)

  • 1 reply
  • 1 has this problem
  • 1 view
  • Last reply by TyDraniu

more options

My html page has a href to ..\assets\style.css and the script.js has a reference to ..\assets\images\backpack.svg

But these files do not display when it is opened in live server. The href is correct because when I type ..\assets\style.css in the Windows File Explorer address bar, it opens the css file correctly.

I tried to load the html directly in Firefox, not LiveServer. I see in the console, Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at file:///C:/Users/Me/Documents/Learn/JS/05_03/Backpack.js. (Reason: CORS request not http).

I posted all the details over here. https://stackoverflow.com/q/70416741/398348

My html page has a href to ..\assets\style.css and the script.js has a reference to ..\assets\images\backpack.svg But these files do not display when it is opened in live server. The href is correct because when I type ..\assets\style.css in the Windows File Explorer address bar, it opens the css file correctly. I tried to load the html directly in Firefox, not LiveServer. I see in the console, Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at file:///C:/Users/Me/Documents/Learn/JS/05_03/Backpack.js. (Reason: CORS request not http). I posted all the details over here. https://stackoverflow.com/q/70416741/398348

All Replies (1)

more options

This is how it works in Firefox. Going above the html file in a directory tree breaks The Same Origin Policy.