added cross domain checks