Access-Control-Allow-Origin: https://example.com Access-Control-Allow-Credentials: true
<!DOCTYPE html>
Welcome to my protected web page.