Use this little website to test if a URL is setup correctly to work with CORS.
Shareable link: https://cors-test.codehappy.dev/?method=get&origin=https%3A%2F%2Fwww.quizland.co.uk%2F&url=https%3A%2F%2Fwww.davejohnson.co.uk
This url can only be loaded by pages that match www.davejohnson.co.uk/. If you're trying to load it from a different origin and it's not working, you'll need to change it so the access-control-allow-origin header is set to *.
These are the response headers received when making the request.
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET, HEAD
access-control-allow-origin: www.davejohnson.co.uk/
cache-control: private
cf-cache-status: DYNAMIC
cf-ray: 98f2654eb163b407-YYZ
connection: keep-alive
content-security-policy: upgrade-insecure-requests
content-type: text/html; charset=UTF-8
date: Wed, 15 Oct 2025 21:26:37 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 15 Oct 2025 21:26:37 GMT
panel: hpanel
platform: hostinger
pragma: no-cache
server: cloudflare
set-cookie: PHPSESSID=tgh3uv96r5ovg86omqf02phrd5; path=/; domain=.davejohnson.co.uk; secure
transfer-encoding: chunked
vary: Origin, accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: PHP/8.0.30
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1
CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.