http://www.w3.org/TR/resource-timing/#timing-allow-origin