chromium/third_party/blink/web_tests/external/wpt/xhr/resources/access-control-basic-denied.py

def main(request, response):
    response.headers.set(b"Cache-Control", b"no-store")
    response.headers.set(b"Content-Type", b"text/plain")

    response.text = b"FAIL: Cross-domain access allowed."