thumbnail Same-origin policy - JavaScript | MDN
thumbnail HTTP access control (CORS) - HTTP | MDN