py?corp=same-origin", "ok",
    "Same-origin fetch in a cross origin iframe load succeeds if the server blocks cross-origin loads with a 'Cross-Origin-Resource-Policy: same-origin' response header.");
    </script>
</body>
</html>
