format code
if xhr has Access-Control-Allow-Origin header, raise error because potentially unsafe response
prevent to repeat xhr
ver 1.9.8