https://griddle-reviews.blogspot.com/2024/03/javascript-set-header-access-control.html