No 'Access-Control-Allow-Origin' header is present on the requested resource.

**Describe the bug**

Lighthouse shows the error "Browser errors were logged to the console".

The description of the error is "Access to XMLHttpRequest at 'https://clientapi.passle.it/CookieControlPlugin/CookieControl' from origin 'https://environment.johnbosley.dev' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource."

The resource at https://clientapi.passle.it/CookieControlPlugin/CookieControl has the header `Access-Control-Allow-Origin: *`, and the console error reported is not logged when visiting the URL https://environment.johnbosley.dev in the browser.

This issue doesn't occur when testing using the devtools, but it does occur when using web.dev.

**To Reproduce**

Steps to reproduce the behavior:
1. Run web.dev on https://environment.johnbosley.dev/ and view [the report](https://lighthouse-dot-webdotdevsite.appspot.com//lh/html?url=https%3A%2F%2Fenvironment.johnbosley.dev%2F#best-practices).

**Expected behavior**

The best practices section shouldn't show any errors.

**Screenshots**