Allow lcal http servers to perform cross site scripting of restful APIs