fix(rsbuild-plugin): explicitly setting CORS headers (#3635)

Author: chenjiahan

packages/rsbuild-plugin/src/cli/index.ts

@@ -177,6 +177,12 @@ export const pluginModuleFederation = (
       // Change some default configs for remote modules
       if (moduleFederationOptions.exposes) {
         config.dev ||= {};
+        config.server ||= {};
+
+        // Allow remote modules to be loaded by setting CORS headers
+        // This is required for MF to work properly across different origins
+        config.server.headers ||= {};
+        config.server.headers['Access-Control-Allow-Origin'] ||= '*';
 
         // For remote modules, Rsbuild should send the ws request to the provider's dev server.
         // This allows the provider to do HMR when the provider module is loaded in the consumer's page.