Server: Added cross-domain check.