mark http://newhtml.net/using-cors/ https://developer.mozilla.org/zh-CN/docs/Web/HTTP/Access_control_CORS