remember the URL of the foreign-origin `<link>` a `<style>` was generated from
adding warning for foreign-origin resources and required CORS headers