Adding XMLHttpRequest to allowed globals