CORS issue embedding <iframe />

Chrome implement’s CORS “properly” and Firefox/Safari go “fuck it”? (Pardon my french)