cross origin script example