Hi Dev Community,
I have a customer-account.page.render extension (allow_direct_linking = true) that consistently fails to load via its real production URL, showing Shopify’s generic “There’s a problem loading this page / Check the URL or try again in a few minutes” error — for every visitor, every browser, regardless of account.
Store uses a custom account domain: account.newfriendscoffee.com
Console error, repeats on every load attempt:
Unsafe attempt to load URL https://cdn.shopify.com/shopifycloud/customer-account-web/production/sprite-1b2b2c.svg
from frame with URL https://account.newfriendscoffee.com/pages/.
Domains, protocols and ports must match.
Network tab confirms this request as (blocked:origin). This is Shopify’s own customer-account-web frontend failing to load its own icon sprite asset via a cross-origin SVG reference — not a request my extension code makes.
What I’ve ruled out:
- My own extension/backend code (reverted to a previous app version — identical failure)
- Browser/session (Chrome + Edge, two different customer accounts)
- Stale registration (full app uninstall + reinstall — confirmed a brand-new CustomerAccountPage resource ID was generated, identical failure persists)
- Backend/OAuth state (my app’s logs confirm a valid session exists and OAuth completes cleanly both before and after reinstall — but zero requests from this extension ever reach my backend at all, meaning the failure happens before my app is contacted)
- Tunnel/VPN networking (fully disabled, confirmed stable, identical failure)
- Customer accounts config (“New customer accounts” confirmed active, not Classic)
- Extension deployment (confirmed via the Dev Dashboard that the extension is correctly registered, active, and healthy in the current app version — structurally identical to a sibling extension that works fine elsewhere)
One clue I think is relevant: this extension has worked correctly when tested via the Shopify CLI’s Dev Console preview link during development — this may be the first time it’s been loaded via its actual production URL on this store’s custom account domain, so this could be specific to serving a customer-account.page.render extension through a custom account domain rather than the default .myshopify.com-style one.
Has anyone else seen this specific sprite-1b2b2c.svg cross-origin block on a custom account domain, or know a workaround?
Cheers
JK