Use this little website to test if a URL is setup correctly to work with CORS.
Shareable link: https://cors-test.codehappy.dev/?url=https%3A%2F%2Fplanet.openstreetmap.org%2Freplication%2Fchangesets%2Fstate.yaml
These are the response headers received when making the request.
accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 3600
cf-cache-status: DYNAMIC
cf-ray: a11f259ebbd3e88e-CMH
connection: close
content-length: 69
content-type: application/yaml
date: Fri, 26 Jun 2026 21:01:24 GMT
etag: "03526b8f000f37098ca9e1f9cd263f34"
last-modified: Fri, 26 Jun 2026 21:01:03 GMT
server: cloudflare
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-id-2: XI2Afbfj1uRRJ+aLihe6e1qfebTQHspDpq/z08EgeT6AqTfV+m6iKQAD5p3XOCV69eOQfB3b5WYA9o/UQvBmvLQTt8DqWi7Hbctv1aKXz7Q=
x-amz-replication-status: COMPLETED
x-amz-request-id: J39YTAHG7A1CFC9D
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: ZCryvEWM4GZjZA1ErkgG_oauq5lg1ySt
CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.