workaround cross-domain permission errors from proxy server