fixed a cross-domain access bug in firefox and safari.