[5] 
[[AMP]] は独自の「[[CORS]] っぽいもの」を使っています。

[2] [CITE@en[CORS in AMP - amp.dev]], [TIME[2022-06-29T13:42:49.000Z]] <https://amp.dev/documentation/guides-and-tutorials/learn/amp-caches-and-cors/amp-cors-requests/?format=websites>


[FIG(quote)[
[FIGCAPTION[
[4] [CITE@en[amphtml/amp-cors-requests.md at master · ampproject/amphtml]]
([TIME[2018-02-14 10:47:27 +09:00]])
<https://github.com/ampproject/amphtml/blob/master/spec/amp-cors-requests.md>
]FIGCAPTION]

> For same-origin requests where the Origin header is missing, AMP sets the following custom header:
> AMP-Same-Origin: true

]FIG]

[FIG(quote)[
[FIGCAPTION[
[1] [CITE@en[amphtml/amp-cors-requests.md at master · ampproject/amphtml]]
([TIME[2018-02-14 10:48:25 +09:00]])
<https://github.com/ampproject/amphtml/blob/master/spec/amp-cors-requests.md>
]FIGCAPTION]

> AMP-Access-Control-Allow-Source-Origin: <source-origin>
> This header allows the specified source-origin to read the authorization response. The source-origin is the value specified and verified in the "__amp_source_origin" URL parameter (for example, "https://publisher1.com").

]FIG]

[3] [[CORS in AMP for Email]] とは違っています。