anonymous ==> CORS requests for this element will have the credentials flag set to 'same-origin'.
use-credentials ==> CORS requests for this element will have the credentials flag set to 'include'.
"" ==> Setting the attribute name to an empty value, like crossorigin or crossorigin="", is the same as anonymous.