img element) and blocks them before they reach a web
the risk of leaking sensitive data by keeping it further from cross-origin web pages.
A CORB-protected MIME type is an HTML MIME type, a JSON MIME type, or an
-XML MIME type excluding image/svg+xml.
+XML MIME type excluding image/svg+xml and application/dash+xml.
Even without CORB, accessing the content of cross-origin resources with CORB-protected MIME types is either managed by the CORS protocol (e.g., in case of