I looks like CORS headers are not being sent from the CDN. We could possibly add them here and they'd pass through, or we could convert this to JS that provides a function that returns the string data and just load it in the page