// Run with Node.js, then open http://127.0.0.1:8787 in a browser. import { createServer } from 'node:http'; import assert from 'node:assert/strict'; import { Script } from 'node:vm'; const png = Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAADElEQVQImWOQLNgNAAHqAUWXoD3FAAAAAElFTkSuQmCC', 'base64'); const html = `Image CORS experiment

Image CORS experiment


`;

const page = createServer((_req, res) => {
  res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8', 'Cache-Control': 'no-store' });
  res.end(html);
});
const images = createServer((req, res) => {
  if (req.url === '/image.png?cors=1') res.setHeader('Access-Control-Allow-Origin', 'http://127.0.0.1:8787');
  res.writeHead(200, { 'Content-Type': 'image/png', 'Cache-Control': 'no-store' });
  res.end(png);
});

page.listen(8787, '127.0.0.1');
images.listen(8788, '127.0.0.1');
if (process.argv.includes('--check')) {
  try {
    new Script(html.match(/