Prevent cross-origin loading of configuration data