chromium/third_party/blink/web_tests/http/tests/security/shape-image-cors-allow-origin.html

<!DOCTYPE html>
<html>
<head>
<script src="/js-test-resources/ahem.js"></script>
<style>
    #clear-left {
        clear: left;
        font: 20px/1 Ahem, sans-serif;
        color: green;
    }

    #clear-left > div {
        float: left;
        width: 200px;
        height: 20px;
    }

    /* Cross-origin request is OK because the "Access-Control-Allow-Origin: *" is returned. */
    #shape-outside-allow-origin-url {
        shape-outside: url("http://localhost:8080/security/resources/image-access-control.php?file=../../resources/square100.png&allow=true");
    } 

</style>
</head>
<body>
    <p>Verify that images with a "Access-Control-Allow-Origin: *" header define the layout.</p>
    <div id="clear-left"><div id="shape-outside-allow-origin-url"></div>X</div>
</body>
</html>