crossOriginIsolated.val web.globals