don't use nonstandard window.location.origin in customizer JS

Fixes #11317.