// With fallback CORS (global default: "*"), CORS headers should be present
assert.Equal(t,"https://example.com",resp.Header.Get("Access-Control-Allow-Origin"),"Should have Allow-Origin header from global fallback")
assert.Contains(t,resp.Header.Get("Access-Control-Allow-Methods"),"GET","Should have GET in Allow-Methods from global fallback")
assert.NotEmpty(t,resp.Header.Get("Access-Control-Allow-Headers"),"Should have Allow-Headers from global fallback")
assert.Contains(t,resp.Header.Get("Access-Control-Allow-Headers"),"Content-Type","Should have requested headers in Allow-Headers from global fallback")