--- a/dom/script/ScriptLoader.cpp
+++ b/dom/script/ScriptLoader.cpp
@@ -1565,19 +1565,24 @@ ScriptLoader::ProcessScriptElement(nsISc
     return false;
   }
 
   // Does CSP allow this inline script to run?
   if (!CSPAllowsInlineScript(aElement, mDocument)) {
     return false;
   }
 
-  // Inline scripts ignore ther CORS mode and are always CORS_NONE.
+  // Inline classic scripts ignore ther CORS mode and are always CORS_NONE.
+  CORSMode corsMode = CORS_NONE;
+  if (scriptKind == ScriptKind::Module) {
+    corsMode = aElement->GetCORSMode();
+  }
+
   request = CreateLoadRequest(scriptKind, mDocument->GetDocumentURI(), aElement,
-                              validJSVersion, CORS_NONE,
+                              validJSVersion, corsMode,
                               SRIMetadata(), // SRI doesn't apply
                               ourRefPolicy);
   request->mValidJSVersion = validJSVersion;
   request->mIsInline = true;
   request->mTriggeringPrincipal = mDocument->NodePrincipal();
   request->mLineNo = aElement->GetScriptLineNumber();
   request->mProgress = ScriptLoadRequest::Progress::Loading_Source;
   request->mDataType = ScriptLoadRequest::DataType::Source;

deleted file mode 100644
--- a/testing/web-platform/meta/html/semantics/scripting-1/the-script-element/module/credentials.sub.html.ini
+++ /dev/null
@@ -1,5 +0,0 @@
-[credentials.sub.html]
-  type: testharness
-  [Modules should be loaded with or without the credentials based on the same-origin-ness and the crossOrigin attribute]
-    expected: FAIL
-

deleted file mode 100644
--- a/testing/web-platform/meta/html/semantics/scripting-1/the-script-element/module/crossorigin.html.ini
+++ /dev/null
@@ -1,5 +0,0 @@
-[crossorigin.html]
-  type: testharness
-  [Imported module, Error in CORS-same-origin script]
-    expected: FAIL
-