An OpenLayers-Script on server A makes a CORS request with basic auth to Server B to get an image (A & B are my servers). It works in Chrome & Safari. Firefox block