/*
    Cross-Origin-Embedder-Policy: credentialless;
    Cross-Origin-Opener-Policy: same-origin;