This is valid html, accessible via CORS