Testing cross-domain access