"Add from URL" should check if the resource is CORS blocked before adding it to the list.

[edave64]

Maybe also add a more useful error message for that