Use this little website to test if a URL is setup correctly to work with CORS.
Shareable link: https://cors-test.codehappy.dev/?method=get&origin=https%3A%2F%2Fwww.quizland.co.uk%2F&url=https%3A%2F%2Fwww.davejohnson.co.uk
This url can only be loaded by pages that match https://www.quizland.co.uk. If you're trying to load it from a different origin and it's not working, you'll need to change it so the access-control-allow-origin header is set to *.
These are the response headers received when making the request.
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://www.quizland.co.uk
cache-control: private
cf-cache-status: DYNAMIC
content-security-policy: upgrade-insecure-requests
content-type: text/html; charset=UTF-8
date: Mon, 26 Jan 2026 06:49:45 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Mon, 26 Jan 2026 06:49:45 GMT
panel: hpanel
platform: hostinger
pragma: no-cache
retry-after: 60
server: cloudflare
set-cookie: PHPSESSID=iekgnsm2sgrabaj51ncqfeq74c; path=/; domain=.davejohnson.co.uk; secure
transfer-encoding: chunked
vary: Origin, accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: PHP/8.0.30
x-xss-protection: 1
CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.