chromium/third_party/blink/web_tests/http/tests/security/resources/cors-check-for-cached-image-iframe.html

<!doctype html>
<img src="http://localhost:8080/security/resources/cors-image.php?max-age=60" crossorigin
     onload="parent.postMessage('FAIL', '*')"
     onerror="parent.postMessage('PASS', '*')">