jekyll大佬：
官方帮助里描述：

Access-Control-Allow-Origin headers are often applied to cacheable content.

使用bypass模式貌似并不会传递Access-Control-Allow-Origin的Header。

Identifying cached assets based on the Host Header, Origin Header, URL path, and query. This allows different resources to use the same Host header but different Origin headers.

这个要从哪里设置呢？

jqbaobao大佬：
企业版应该可以

shvod大佬：
楼上是个坑B，这个用workers改改就完事了