crossOrigin attribute to configure the CORS requests made by a <video> or <script> element, and by the images
of a glTF model. The "anonymous" keyword means that there will be no exchange of user credentials via cookies,
client-side SSL certificates or HTTP authentication as described in the Terminology section of the CORS
specification; "use-credentials" sends them, as withCredentials does.
Every other asset (images, JSON, maps, binary files, audio...) is always requested with CORS, whatever this says:
an asset on another origin loads when its server allows it (an Access-Control-Allow-Origin header), and fails
to load, with an error naming the asset, when it does not.
crossOrigin attribute to configure the CORS requests made by a
<video>or<script>element, and by the images of a glTF model. The "anonymous" keyword means that there will be no exchange of user credentials via cookies, client-side SSL certificates or HTTP authentication as described in the Terminology section of the CORS specification; "use-credentials" sends them, aswithCredentialsdoes.Every other asset (images, JSON, maps, binary files, audio...) is always requested with CORS, whatever this says: an asset on another origin loads when its server allows it (an
Access-Control-Allow-Originheader), and fails to load, with an error naming the asset, when it does not.