title: Cross-Origin Read Blocking (CORB) error with Firebase Storage
body: <p>I'm using a download URL to get an HTML file from my Firebase Storage and display it in a template. In my template I'm using <code>&lt;img&gt;</code> with the <code>src</code> set to the download URL. The browser shows a broken file and the console says</p>
  
  <pre><code>Cross-Origin Read Blocking (CORB) blocked cross-origin response https://firebasestorage.googleapis.com/v0/b/languagetwo-cd94d.appspot.com/o/English_Videos%2FWalker_Climbs_a_Tree%2Fscript.html?alt=media&amp;token=8772258d-9417-4f93-b16d-29d353c5262
  </code></pre>
  
  <p>and then the download URL. The download URL works when I put it in a browser window. As the <a href="https://firebase.google.com/docs/storage/web/download-files" rel="nofollow noreferrer">documentation</a> suggested I made this file</p>
  
  <pre class="lang-js prettyprint-override"><code>[
    {
      "origin": "*",
      "method": "GET",
      "maxAgeSeconds": 3600
    }
  ]
  </code></pre>
  
  <p>named it <code>cors.json</code>, and ran</p>
  
  <pre><code>gsutil cors set cors.json gs://languagetwo-cd94d.appspot.com
  
  </code></pre>
  
  <p>I updated <code>gsutil</code>. I cleared my Chrome cache. I tried my app in Chromium. I tried <code>POST</code> instead of <code>GET</code>. I'm still getting the CORB error. What else should I try? Do I need to set <code>Content-Type</code>?</p>