[SRI] Requiring CORS for SRI

Add a description of [SRI] Requiring CORS for SRI