Use this little website to test if a URL is setup correctly to work with CORS.
Shareable link: https://cors-test.codehappy.dev/?url=https%3A%2F%2Fplanet.openstreetmap.org%2Freplication%2Fchangesets%2Fstate.yaml
These are the response headers received when making the request.
accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 3600
cf-cache-status: DYNAMIC
cf-ray: 99b7804e9725b46e-ORD
connection: keep-alive
content-length: 69
content-type: binary/octet-stream
date: Sat, 08 Nov 2025 19:33:17 GMT
etag: "d0b9eb0435d2ee4b62141415ce09fd57"
last-modified: Sat, 08 Nov 2025 19:32:28 GMT
server: cloudflare
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-id-2: U3EzR/osyPimY2tEtiV5DVVuxVb7xQiP7vEOKwGS0pzmvAqa+oJ0pBNx+FiqyC701pR3gOj06qq06qOcPiLtXUG2QNv/ArbzGU055SWqOVk=
x-amz-replication-status: COMPLETED
x-amz-request-id: SEWPVT0GTYDCWPNS
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: 9jxZ7R82SHWkYUN2OhTLHcWksvxgT0nl
CORS tester was built by @mscccc. The code is available on GitHub. Sponsored by HTML/CSS to Image.