Get content is protected, but error status is not. For example a site can check if an image that is shown only to logged users of some other site loads successf

Get content is protected, but error status is not. For example a site can check if an image that is shown only to logged users of some other site loads successfully (this leaks if a user is logged).