[kortilla]

But from JavaScript I don’t think you can see that. You just get the end result of the image being served to you. You have to infer it from timing.

[megous]

https://megous.com/dl/tmp/705dc9a2477d1f95.png

For cross-origin, you'd add CORS.