Cookie “__cf_bm” has been rejected for invalid domain, when opening assets in Firefox

- [x] I confirm this is a bug with Supabase, not with my own application. - [x] I confirm I have searched the [Docs](https://docs.supabase.com), GitHub [Discussions](https://github.com/supabase/supabase/discussions), and [Discord](https://discord.supabase.com). ## Describe the bug When loading a static image asset from a bucket in Firefox, a browser console error shows, "Cookie “__cf_bm” has been rejected for invalid domain.". This is inconsequential, but it happens for each image loaded on the page, so they stack up. ## To Reproduce Open the 1. Open Firefox. 2. Open an asset's url (e.g., here's one from my bucket https://qitwqbodzgvopxlvwsde.supabase.co/storage/v1/render/image/public/artwork/6f55179b-aff8-43b8-8217-7d04dc07c61d) 3. Open console 4. Observe "Cookie “__cf_bm” has been rejected for invalid domain" in console ## Expected behavior No error when using an asset. ## Screenshots <img width="1758" height="902" alt="Image" src="https://github.com/user-attachments/assets/c7e57ce4-a31b-4448-94f0-5494eaf1be4f" /> If applicable, add screenshots to help explain your problem. ## System information - OS: macOS - Browser: firefox