tl;dr:<p><pre><code> - chrome hides OPTIONS requests in dev tools
- chrome disallows cross-origin requests to extensions permission urls [1]
</code></pre>
[1] <a href="https://www.chromium.org/Home/chromium-security/extension-content-script-fetches/" rel="nofollow">https://www.chromium.org/Home/chromium-security/extension-co...</a><p>"extension content scripts have traditionally been able to fetch cross-origin data from any origins listed in their extension's permissions, regardless of the origin that the content script is running within. As part of a broader Extension Manifest V3 effort to improve extension security, privacy, and performance, these cross-origin requests in content scripts will soon be disallowed."