Example did not run with Firefox - xhr.withCredentials only in async requests allowed. Documentation section for XSS requests.