Allowed cross-domain requests.