The CORS protocol initially needed that behavior but was subsequently altered to not have to have it. However, not all browsers have executed the change, and so nevertheless exhibit the at first expected conduct. In this instance, content at first loaded from would make an easy GET request into a https://charlesh544btj5.tkzblog.com/profile