cross-domain controls