title: CORS on firebase storage
body: <p>I'm gettin the normal cors error on my firebase storage when I do a get call on an html file:</p>
  
  <pre><code>Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers in preflight response.
  </code></pre>
  
  <p>I'm using axios for the call:</p>
  
  <pre><code>axios.get('https://firebasestorage.googleapis.com/v0/b/xxxxx-xxxxx.appspot.com/o/files%2Fsigning%2F148%2F459.html?alt=media&amp;token=f3be2ef2-a598-4c30-a77b-8077e8b1f7bc',
  {
     headers: {'Access-Control-Allow-Origin': '*',}
  )
  </code></pre>
  
  <p>I have the access set to public:</p>
  
  <pre><code>service firebase.storage {
    match /b/{bucket}/o {
      match /{allPaths=**} {
        allow read, write;
      }
    }
  }
  </code></pre>
  
  <p>This same setup works fine when I load images but it's giving me the error for the stored html file. Any thoughts on how to fix it?</p>