Cross-Origin Read Blocking (CORB) is a security feature that prevents the contents of a resource from ever entering the memory of the renderer process memory based on its MIME type.
The main motivation behind CORB is to give malicious web page a hard time pulling cross-site resource into its process to steal.
CORB prevents the renderer process from receiving a cross-origin data resource (i.e. HTML, XML, or JSON) if:
Data resources that are blocked by the CORB policy are presented to the process as empty, although the request does still happen in the background. a
To prevent CORB: