<!doctype html>
<img src="http://localhost:8080/security/resources/cors-image.php?max-age=60" crossorigin
onload="parent.postMessage('FAIL', '*')"
onerror="parent.postMessage('PASS', '*')">
<!doctype html>
<img src="http://localhost:8080/security/resources/cors-image.php?max-age=60" crossorigin
onload="parent.postMessage('FAIL', '*')"
onerror="parent.postMessage('PASS', '*')">