mark
http://newhtml.net/using-cors/
https://developer.mozilla.org/zh-CN/docs/Web/HTTP/Access_control_CORS