1. Cross-Origin Resource Sharing

    Method of performing XMLHttpRequests across domains

  2. eventsource api: `eventsource()` constructor: cors support (`withcredentials`)

  3. headers http header: content-length: cors-safelisted response header