Controlled HTTPS origin preflight

inert: no network probe is executed