This header makes it easier for sites to block unwanted "no-cors" cross-origin requests. Tests: ... Fixes #687. Preview | Diff