Cross-Origin-Resource-Policy DEMO

see console

corp: same-origin

corp: same-site

corp: cross-origin