I think it's only needed for local files. Otherwise browsers should take care of adding the origin?