Some requests can be considered same-site, even if they are not actually same-site, in a similar way as we disable CORS for some cross-origin requests.
<rdar://problem/123848604>
Pull request: https://github.com/WebKit/WebKit/pull/25754
Committed 276015@main (930a87998c72): <https://commits.webkit.org/276015@main> Reviewed commits have been landed. Closing PR #25754 and removing active labels.