Tons of CORS/SRI console errors for auto-injected beacon.min.js

[adamlui]

What versions & operating system are you using?

  System:
    OS: Windows 10 10.0.19045
    CPU: (4) x64 Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz
    Memory: 541.39 MB / 7.89 GB
  Binaries:
    Node: 22.15.0 - C:\Program Files\nodejs\node.EXE
    npm: 11.7.0 - C:\Users\adaaaam\AppData\Roaming\npm\npm.CMD

Please provide a link to a minimal reproduction

https://github.com/KudoGrading/kudocoa.com

Describe the Bug

Please provide any relevant error logs

No response

[edmundhung]

Thanks for the report! The computed hash z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg... is the SHA-512 of empty content, and Status code: (null) means the request never completed. Something is blocking requests to static.cloudflareinsights.com before they reach Cloudflare.

It might be caused by ad blockers, privacy extensions, Firefox Enhanced Tracking Protection (strict mode) or corporate firewalls. Maybe try opening your site in incognito mode with extensions disabled. If the errors disappear, an extension is the cause.

The beacon.min.js script is Cloudflare's Real User Monitoring (RUM) for collecting performance metrics. These errors are harmless if you or your users use privacy tools (the site works fine, just without RUM data). If you'd prefer to disable RUM entirely, you can disable it in the Cloudflare dashboard.

[adamlui]

It still occurs in FF Private mode w/ all add-ons disabled:

[adamlui]

Here's the worker.js if that matters https://github.com/KudoGrading/kudocoa.com/blob/main/src/worker.js

[adamlui]

It happens in chrome too

[edmundhung]

Just realize the browser console did mention the script was blocked because Enhanced Tracking Protection is enabled. So I think it will need to be disabled if you want it to load properly.