Not using $.load, but plain XHR.
Merge branch 'master' into no_cross_domain_permission