Extension to selectively allow cross-origin requests