hack for cross-origin URLs + some random details