Cross-origin filter. Fix #6