Demonstration of how cross-origin access to image data somewhat unintuitively requires a special "crossorigin" attribute set on the img element, even when `Access-Control-Allow-Origin: *` is already present on the response image even without that attribute.