HTTPContent-Type →Cookie →Cross-Origin Read Blocking (CORB) →Cross-Origin Resource Policy (CORP) →Cross-Origin Resource Sharing (CORS) →X-Content-Type-Options (XCTO) →