I have a page that attampts to load https://blog.cloudflare.com located at https://chickar.ee/blog.cloudflare.com (source) the XHR request fails because of the lack of Access-Control-Allow-Origin header.
The request then falls back to a proxy (source), but that request also fails (I’ll have to debug why it thinks it’s a circular redirect).
To avoid hitting the proxy at all, I would really apprecaite it if you could add
Access-Control-Allow-Origin: * to all of the pages on https://blog.cloudflare.com. Adding this header is completely safe since the the site is public anyways.