Meeting Link on Custom Domain causes CORS Errors in Firefox

[svamann]

We're hosting our website in HubSpot Content Hub and want to provide Meeting Links using our brand domain. That's easily setup, by chosing the respective domain for meetings in the HubSpot settings, which allows me to provide, e.g.: https://teamscale.com/meetings/fabian-streitel 

However, this page produces CORS errors, which causes Firefox (in strict privacy mode), to block the page entirely (white page):

 

Apparently, it dislikes the content provided via static.hsappstatic.net, which is apparently a different domain than teamscale.com. When I access the same page through meetings-eu1.hubspot.com (which is also a different domain), it shows properly:

So I'm assuming it's some configuration issue on our domain.

Does anyone have a hint what to look for and where to configure it in HubSpot?

 

[kennedyp]

Hey @svamann -- thanks for your post! 

Firefox uses a third party to provide a list of blocked domains. It would appear that our meetings APIs are being blocked due to the domain on which they are hosted.

This is confirmed with your troubleshooting above-- the issue only occurs when the page origin is different from a HubSpot host (e.g. teamscale.com vs. meetings.hubspot.com). It seems like the only way to override this behavior is through the Firefox (or other add blocker) settings: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

Otherwise, I can understand the confusion with this behavior, so I will pass along some internal feedback to our team about this. I also encourage you to consider posting a feature request on our Ideas Forum here. If you find a similar idea, give it an upvote and share your unique use case in the comments.

Feel free to create a new idea if your idea is not already there and share it here for some added visibility. 

Best, 
Kennedy

😊

[svamann]

I feared this would be what you say... thanks for the swift response anyways!

What would be the feature I could suggest that solves this? Providing the meetings stuff through a custom domain proxy, to fool Firefox's blocker? 🤔

[kennedyp]

Good question. Honestly, I might just describe this issue as best you can. You can include that suggestion as well. Sometimes just getting the issue out there for others to comment on and upvote will help our team see the need & hopefully come up with some solutions! 

[svamann · Accepted solution]

Posted it here: https://community.hubspot.com/t5/HubSpot-Ideas/CORS-error-free-meetings-pages-on-brand-domain/idi-p/...

[kennedyp]

Upvoted! Thank you so much for your contribution 😊