A problem only too familiar to observablehq users, there are quite a few solutions

https://observablehq.com/search?query=Cors&onlyOwner=false