CORS related issues with the editor's execution of JS

[lozandier]

For some reason, I've started to get errors regarding the JS execution of the extension :

[oslego]

Thanks for the report, Kevin.

I'm not sure what's going on, but I suspect some interaction with ChromeVox extension. Can you disable that and confirm if the error still occurs?

The shapes editor extension uses a liberal CSP directive due to the way the Snap SVG library works. I don't fully understand what's going on in there, but restricting it will cause Snap to stop working.