Cross-Origin-Embedder-Policy: require-corp header set.