Resource served with `Cross-Origin-Resource-Protected: same-origin`.
