CORS policy checker

Sends a cross-origin read and a real preflight from an origin nobody can own, and reports who this endpoint is willing to hand its data to.

Part of security and privacy: what does the site hand to a browser, and to whom? In the grid, its column is headed “CORS”.