CORS
HLS manifests and segment URLs must respond with
Access-Control-Allow-Origin headers that allow the page origin.
This library does not manage CORS headers; configure them on your CDN or
origin server. A missing or wrong Access-Control-Allow-Origin on any segment
request surfaces as a playback error event with a media error code, not an
obvious network message.