Set CORS headers for fast-refresh

[nandastone]

{
  "react": "^17.0.1",
  "react-scripts": "4.0.3"
}

My React app is loaded across domain in development, and I have configured my React app to also load bundle chunks across domain using __webpack_public_path__.

For example:

Page on https://test.local -> embeds https://host.docker.internal:3002/static/js/bundle.js -> loads https://host.docker.internal:3002/static/js/0.chunk.js.

The issue is during hot-loading, the update JSON is also loaded from cross-domain resulting in a CORS error:

As CRA doesn't allow configuration access to webpack-dev-server, I can't think of a way around this aside from disabling fast-refresh via the FAST_REFRESH=false env variable.

Does anyone have a better idea or solution?