Same-Origin with text fragment in src attribute:
Same-Origin:
Cross-Origin: