Hello! This website demonstrates Cross-Origin Resource Sharing (CORS).
Feel free to use it as an example or for non-malicious testing purposes.
Its source code can be found on GitHub.

By default, this site sends the following HTTP response headers:

This allows any website to retrieve the content of this site using an XMLHttpRequest (and even to read all response headers).

When you want to play around with CORS, you can also change the allowed origin returned using a GET parameter (note that only a single origin is allowed, as specified by the standard):
http://same-origin-policy.com/cors_example.php?access_control_allow_origin=http%3A%2F%2Fexample.com