Are we going to have Cross site scripting problems if it's trying to load javascript from studio.edx.org?