Right. So in theory if we set the Access-Control-Allow-Origin/Access-Control-Allow-Headers headers we could fix the problem without resorting to JSONP?