CORS weirdness on MacOS Safari when using ChatGPT

On rather old, Intel Macs running Safari, some of my colleagues (who insist on using Safari and Intel… alongside their Mn, the UI disintegrates after a typical CORS problem, creating a cascade of 404 as a consequence.

It starts with:

Preformatted text`[Error] Failed to load resource: Origin URL-not-permitted-by-bug-field?! is not allowed by Access-Control-Allow-Origin. Status code: 404 (sso,3910029c4ae24587,js, line 0)

And then… naturally:

[Error] Cross-origin script load denied by Cross-Origin Resource Sharing policy.
[Error] The source list for Content Security Policy directive ‘script-src’ contains an invalid source: ‘’wasm-unsafe-eval’’. It will be ignored.
[Error] Unrecognized Content-Security-Policy directive ‘report-to’.

[Error] The source list for Content Security Policy directive ‘script-src’ contains an invalid source: ‘’wasm-unsafe-eval’’. It will be ignored.
[Error] Unrecognized Content-Security-Policy directive ‘report-to’.

[Error] Refused to apply a stylesheet because its hash, its nonce, or ‘unsafe-inline’ does not appear in the style-src directive of the Content Security Policy. (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,html, line 1, x2)
[Error] Feature policy ‘Camera’ check failed for iframe with origin ‘URL-not-permitted-by-bug-field?!’ and allow attribute ‘’.
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227681)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227471)
	Promise
	mn (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227406)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:249873)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:12658)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:171281)
[Error] Feature policy ‘Microphone’ check failed for iframe with origin ‘URL-not-permitted-by-bug-field?!’ and allow attribute ‘’.
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227681)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227471)
	Promise
	mn (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227406)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:249873)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:12658)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:171281)
[Error] Not allowed to call enumerateDevices.
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227681)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227471)
	Promise
	mn (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:227406)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:249873)
	h (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:150791)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:152125)
	e (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163565)
	c (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163769)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163828)
	Promise
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:163719)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:12658)
	(anonymous function) (enforcement,bf6c920f19fb49ce16c82aaef4b83f45,js:1:171281)
[Error] Failed to load resource: the server responded with a status of 404 () ([gizmoId]-3a0ded75070a6fcc,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (5165-ed692abfbdadf856,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (4368-c103dc3db87d03e3,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (8890-45d417f437f77b43,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (main-ad69f18646c7d8ee,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (85ea0523a4a24fab,css,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6266,48b2703c33a978fa,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6199c948-06eadd6fd753c12d,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (9e9db7d068797b90,css,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (5365-2e94e2f4418cc6e5,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (093e021b-6b6dd2f6dfce7c2b,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (5939-671fae1a7dc80c46,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () ([[…default]]-49e62819eb8389b1,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (webpack-a22d5430122f1089,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (4834-fc9833a1783d28c9,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (9511-9ee0b2c19784fbd1,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (2349-447da1affc305563,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6385-b25c12fd05a3a9a4,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (8852-70d2af7087eb0283,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (3969-ae039137eeda7554,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (5582-ebe06f968f553062,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (gpts-66fc735e4f9a0141,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6331-fab1cf9e8bcf0c6a,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6992-fc206d922df668be,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6271-485c8161b3fc18e7,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (3718-23579a02519e81db,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (766-b9efd07ec69efc19,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (7349-59a6d094779006be,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (4984-2e2895d93823b6f0,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (6229-558a9e302b3f5298,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (4099-42fd61f402e1a66e,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (1783-020929f8654a0d4e,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (765-0261a42d0c2bc087,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (1cc12f7f,72acf7aece6a6067,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (7126-2ad9af8687c7bc11,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (0-ff7e28a757235e50,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (3590,bacaa9c23f3a30b7,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (_app-d0d5e208238be400,js,map, line 0)
[Error] Failed to load resource: the server responded with a status of 404 () (framework-ac719dc28fda7a28,js,map, line 0)

The same users have zero trouble on rather (comparatively speaking) older Chromes, Operas, Firefoxes (yes, I’m the weirdo dealing with weird problems at my companies, as a last resort).

The UI partly loads though (stuff like the history of chats created, preferences…)

The problem appeared a few days ago and no amount of local storage / authentication flushing helps.

My hunch is Safari is notoriously finicky with CORS (sometimes just adding a slash or a keyword solves stuff like this). Another hint is that it started after you’d migrated the DNS from chat,openai,org to chatgpt,com and something might have ben lost in transition.

We’re a paying customer in France EU.

Apologies if I’m completely in the wrong place and we’re discussing the API exclusively (which runs fine, otherwise). Couldn’t find anything else that’s dev-aware and still ChatGPT-ish to submit a bug.

(Also, a bit tedious to have to run regex to comply with “no URLs in comments”.)

Thanks!

2 Likes

Gotten worse. Now propagated to much more modern browsers like the latest Chromes.

Still CORS-related, as in

Access to script at 'https cdn oaistatic com/_next/static/chunks/sso.2ca3d088a4787f43 js?dpl=c7398b7665ac26bd09ffbcb06200ce1b65a62635' from origin 'https // chatgpt com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Exact same issue here too, 2012 mb pro running 10.15.7 Catalina. Same issue no matter if using firefox or safari. Also same timeframe when my issues started occuring.

1 Like

Continuing to this day — 2024-06-13 — Safari, Chrome, Firefox, on MacOS Catalina and newer (haven’t been using MacOS 14 Sonoma).

Same pattern — the front fails to load the Next.js bits and pieces (chunks… to use Next’s taxonomy) — that has to do with CORS or even SSO (while the login works fine).

Some variant of Origin https,//chatgpt,com is not allowed by Access-Control-Allow-Origin. Status code: 404

However, disabling Cross-OriginRestrictions in the Dev menu does not help. Still a console choke-full of 404s.

I also still have the same problem.

I’m facing similar issue, Safari Version 15.6.1 (15613.3.9.1.16, 15613), macOS Catalina