Blog
Parcel bundler: CORS defaults, HMR over WebSocket, and Web Workers with blob: module scripts
Parcel zero-config dev server sets permissive defaults—tighten CORS before exposing demos on shared office networks.
1 min read
parcelcorshmr
Plugins
Custom Parcel transformers may emit additional fetch calls—audit each plugin for implicit cross-origin traffic.
SVG inlining can change asset URLs that your CORS allowlist expects—regression-test after design handoffs.
Multi-target builds
Building browser and Node targets from one repo can duplicate environment files—never reuse production API keys in Parcel’s dev HTML.
Align service worker scopes with API base paths to avoid opaque CORS failures in offline-first PWAs.