[BUG] The Playwright site (https://trace.playwright.dev/) does not currently support the loading of TraceViewer from a storage file URL.

[darshandp007]

Steps

• I have trigger this URL to access the traceviwer online but it's not work.
• URL: https://trace.playwright.dev/?trace=https://demo.playwright.dev/reports/todomvc/data/cb0fa77ebd9487a5c899f3ae65a7ffdbac681182.zip

Expected

• It should work same as local file upload.

[mxlnk]

In your case it seems to be because of the wildcard in Allow-Origin

Access to fetch at 'https://demo.playwright.dev/reports/todomvc/data/cb0fa77ebd9487a5c899f3ae65a7ffdbac681182.zip' from origin 'https://trace.playwright.dev' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.

We are seeing a similar Problem. We are serving traces from a public google cloud bucket. We have not yet found a way to set the headers correctly for our bucket. For us it looks like this means we can't use the trace viewer, as the google apis don't allow the usage of Access-Control-Allow-Credentials https://cloud.google.com/storage/docs/cross-origin#additional_considerations

Access to fetch at 'https://storage.googleapis.com/...-trace.zip' from origin 'https://trace.playwright.dev/' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Credentials' header in the response is '' which must be 'true' when the request's credentials mode is 'include'.

I guess it is because of this commit 3f3f332