Use internal URL if browsers don't support CORS