关于linux:CORS

https://developer.mozilla.org…

curl -I https://media.istreamlab.com/Staging/product/0.png
<code>
HTTP/2 200 
date: Tue, 08 Sep 2020 03:52:38 GMT
content-type: image/png
content-length: 11227
set-cookie: __cfduid=da7e4d857a5629f52b71b131d5ce6f77d1599537158; expires=Thu, 08-Oct-20 03:52:38 GMT; path=/; domain=.istreamlab.com; HttpOnly; SameSite=Lax
x-amz-id-2: XrLXIyt3xpDJg9asun4rYmdbFFRHRsoKp0FUl2YDdczJg6mAFCGbMhWn4Avq7FFyVkbGmKj2q+A=
x-amz-request-id: 740649BB84FF3E21
last-modified: Thu, 13 Aug 2020 08:45:57 GMT
etag: "71afcd8931dee407b1b401632fc23c38"
x-amz-version-id: td6eqWXXKG.LRbUtQ3gAQuYVzKqqU6eT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1460
accept-ranges: bytes
cf-request-id: 050d713237000001cdcf3da200000001
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 5cf5b7c9f8a401cd-SIN
</code>


curl -I -H "Origin: www.baidu.com" https://media.istreamlab.com/Staging/product/0.png
<code>
HTTP/2 200 
date: Tue, 08 Sep 2020 03:52:18 GMT
content-type: image/png
content-length: 11227
set-cookie: __cfduid=dbf09895fce95f74f65f282f366c6bed81599537138; expires=Thu, 08-Oct-20 03:52:18 GMT; path=/; domain=.istreamlab.com; HttpOnly; SameSite=Lax
x-amz-id-2: hqm66mKY2iPUKZAJ0IBWlRmh66T0/LYjJFMjNEjrXNTMHiWifYK/pCzMHVly0SgfkPp2Va8OOQs=
x-amz-request-id: 5D4912AF74E81DD1
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, POST
access-control-expose-headers: x-amz-server-side-encryption, x-amz-request-id, x-amz-id-2
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 13 Aug 2020 08:45:57 GMT
etag: "71afcd8931dee407b1b401632fc23c38"
x-amz-version-id: td6eqWXXKG.LRbUtQ3gAQuYVzKqqU6eT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-request-id: 050d70e2ef0000016abba7b200000001
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 5cf5b74b1912016a-SIN
</code>