Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: cross-origin