Add support for CORS / XHR

This is ready to be looked over now.
Probably reads better as:
```
if ( typeof data === "string" ) {
  return (new Function("return " + data))();
} else {
  return nul;
}
```