According to MDN
Cross-origin embedding is typically allowed ... Cross-origin reads are typically disallowed ...
Cross-origin embedding is typically allowed ...
Cross-origin reads are typically disallowed ...
But I could