http/tests/security/resources/cors-script.php

<?php
header("Access-Control-Allow-Origin: http://127.0.0.1:8000");
header("Content-Type: application/javascript");
?>
alert("script ran.");