script-tag中的Cookies包含在跨域中

fetch('https://example.com/data', {
  method: 'GET',
  credentials: 'include',
})
  .then((response) => response.json())
  .then((data) => console.log(data));

const xhr = new XMLHttpRequest();
xhr.open('GET', 'https://example.com/data', true);
xhr.withCredentials = true;
xhr.onreadystatechange = function () {
  if (xhr.readyState === 4 && xhr.status === 200) {
    console.log(JSON.parse(xhr.responseText));
  }
};
xhr.send();

Access-Control-Allow-Origin: https://your-domain.com
Access-Control-Allow-Credentials: true