User", false, "fooUser", "barPass");

      xhr.withCredentials = true;

      xhr.send();

      assert_equals(xhr.status, 401, "Request raises HTTP 401: Unauthorized error.");
    }, "CORS sync request with URL credentials");
    </script>
  </body>
</html>
