Newsletter Subscription Fails with Cross Origin Errors

[danyeaw]

Describe the bug

I am not able to add myself to the newsletters due to Cross Origin Resource Blocking errors.

Steps to reproduce

1. Go to https://beeware.org/community/keep-informed/
2. Enter your info
3. Click on Subscribe

Nothing happens. Open the developer console and see errors.

Expected behavior

Newsletter subscription is successful.

Screenshots

No response

Environment

• Operating System: macOS
• Software versions:
  • Firefox 137.0 and Chrome 135.0.7049.42

Logs

GET
[https://pybee.us13.list-manage.com/subscribe/post-json?u=80484e69d1f766a4f4477b680&id=fe4d05bfd7&c=jQuery190003146720770571676_1743714472115&EMAIL=dyeaw@anaconda.com&FNAME=Daniel+Yeaw&NAME=Dan&group[4085][1]=1&group[4085][2]=2&group[4085][8]=8&group[4085][16]=16&group[4085][32]=32&EMAILTYPE=html&b_80484e69d1f766a4f4477b680_fe4d05bfd7=&subscribe=Subscribe&_=1743714472116](https://pybee.us13.list-manage.com/subscribe/post-json?u=80484e69d1f766a4f4477b680&id=fe4d05bfd7&c=jQuery190003146720770571676_1743714472115&EMAIL=dyeaw%40anaconda.com&FNAME=Daniel+Yeaw&NAME=Dan&group%5B4085%5D%5B1%5D=1&group%5B4085%5D%5B2%5D=2&group%5B4085%5D%5B8%5D=8&group%5B4085%5D%5B16%5D=16&group%5B4085%5D%5B32%5D=32&EMAILTYPE=html&b_80484e69d1f766a4f4477b680_fe4d05bfd7=&subscribe=Subscribe&_=1743714472116)
NS_BINDING_ABORTED

A resource is blocked by OpaqueResponseBlocking, please check browser console for details. [post-json](https://pybee.us13.list-manage.com/subscribe/post-json?u=80484e69d1f766a4f4477b680&id=fe4d05bfd7&c=jQuery190003146720770571676_1743714472115&EMAIL=dyeaw%40anaconda.com&FNAME=Daniel+Yeaw&NAME=Dan&group%5B4085%5D%5B1%5D=1&group%5B4085%5D%5B2%5D=2&group%5B4085%5D%5B8%5D=8&group%5B4085%5D%5B16%5D=16&group%5B4085%5D%5B32%5D=32&EMAILTYPE=html&b_80484e69d1f766a4f4477b680_fe4d05bfd7=&subscribe=Subscribe&_=1743714472116)
Loading failed for the <script> with source “https://pybee.us13.list-manage.com/subscribe/post-json?u=80484e69d1f766a4f4477b680&id=fe4d05bfd7&c=jQuery190003146720770571676_1743714472115&EMAIL=dyeaw%40anaconda.com&FNAME=Daniel+Yeaw&NAME=Dan&group%5B4085%5D%5B1%5D=1&group%5B4085%5D%5B2%5D=2&group%5B4085%5D%5B8%5D=8&group%5B4085%5D%5B16%5D=16&group%5B4085%5D%5B32%5D=32&EMAILTYPE=html&b_80484e69d1f766a4f4477b680_fe4d05bfd7=&subscribe=Subscribe&_=1743714472116”.

Chrome:

Response was blocked by CORB (Cross-Origin Read Blocking)
post-json?u=80484e69d1f766a4f4477b680&id=fe4d05bfd7&c=jQuery19005785072449495071_1743684759826&EMAIL=dyeaw%40anaconda.com&FNAME=Daniel+Yeaw&NAME=Dan&group%5B4085%5D%5B1%5D=1&group%5B4085%5D%5B2%5D=2&group%5B4085%5D%5B8%5D=8&group%5B4085%5D%5B16%5D=16&group%5B4085%5D%5B32%5D=32&EMAILTYPE=html&b_80484e69d1f766a4f4477b680_fe4d05bfd7=&subscribe=Subscribe&_=1743684759827
--
post-json?u=80484e69d1f766a4f4477b680&id=fe4d05bfd7&c=jQuery19005785072449495071_1743684759828&EMAIL=dyeaw%40anaconda.com&FNAME=Daniel+Yeaw&NAME=Dan&group%5B4085%5D%5B1%5D=1&group%5B4085%5D%5B2%5D=2&group%5B4085%5D%5B8%5D=8&group%5B4085%5D%5B16%5D=16&group%5B4085%5D%5B32%5D=32&EMAILTYPE=html&b_80484e69d1f766a4f4477b680_fe4d05bfd7=&subscribe=Subscribe&_=1743684759829

Additional context

We had a similar issue over at pyscript/pyscript.net#80. It is with Mailerlite instead of Mailchimp, but I resolved it by moving the scripts and CSS used for newsletter subscription in house.

[freakboy3742]

Huh... I can't reproduce this. I've just been able to subscribe using Chrome (135.0.7049.42) and Safari (18.3.1).

I noticed that you were historically subscribed, but that subscription was inactive; but that doesn't seem to be the cause either - I was able to unsubscribe and re-subscribe my 2 test users on Chrome and Safari.

I've pushed up #608 as a speculative fix that uses local assets (or, at least, the assets that are available to download - the actual asset we really want - post-json - is a dynamic page, not CDN content).