chromium/third_party/blink/web_tests/http/tests/security/resources/cors-redir.php

<?php
header("Access-Control-Allow-Origin: *");
header("location: ".$_GET["url"]);
?>