@rwldrn, the usual method for handling cross-origin requests in B2G would be to set the systemXHR permission on your app, and then use XHRs. That's what we do in the email app to talk to ActiveSync servers.