jsonp跨域被CORB攔截，有何解決方法？

jsfiddle

這里qq音樂已經(jīng)指定了只有人家qq的域名才可以用這個(gè)js。就是防止你直接盜用。

你直接把代碼手動(dòng)下載下來， 然后地址指向本地不就好了嗎

是瀏覽器的安全策略禁止了這個(gè)，防止跨域攻擊啥的 參考 https://www.chromium.org/Home...

Cross-Origin Read Blocking (CORB) is a new web platform security feature that helps mitigate the threat of side-channel attacks (including Spectre). It is designed to prevent the browser from delivering certain cross-origin network responses to a web page, when they might contain sensitive information and are not needed for existing web features. For example, it will block a cross-origin text/html response requested from a <script> or <img> tag, replacing it with an empty response instead. This is an important part of the protections included with Site Isolation.