CORS private page

It can be accessed only with orign = webscantest.com or from page with the same domain

Some interesting text here