client: Detect cross-origin requests