Use this little website to test if a URL is setup correctly to work with CORS.
Shareable link: https://cors-test.codehappy.dev/?method=get&origin=https%3A%2F%2Fcors-test.codehappy.dev%2F&url=https%3A%2F%2Flevysheetmusic.mse.jhu.edu%2Fsites%2Fdefault%2Ffiles%2Fcollection-pdfs%2Flevy-000-000.pdf
These are the response headers received when making the request.
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
cf-cache-status: MISS
cf-ray: a03d8f9ed733e88e-CMH
connection: keep-alive
content-length: 4581267
content-type: application/pdf
date: Sat, 30 May 2026 11:57:23 GMT
etag: "45e793-5cc58d09cd3b5"
expires: Sat, 13 Jun 2026 11:57:23 GMT
last-modified: Sun, 19 Sep 2021 13:05:12 GMT
server: cloudflare
set-cookie: __cf_bm=TMD6flbItbeVVCsG.UzQuKYO3TPt0m6lUSBp1kwVnD0-1780142243-1.0.1.1-oK1K.CPiNctecV0PEkbyFZBg5.rK_ZflKwpEwJX7lwcuLFzrUHxQdPspCDha9e_UNIh56_i7HXl.fZUvJl6xz.6ZQxh5sOeN2PWQ.eG2LY4; path=/; expires=Sat, 30-May-26 12:27:23 GMT; domain=.mse.jhu.edu; HttpOnly; Secure
speculation-rules: "/cdn-cgi/speculation"
x-content-type-options: nosniff
CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.