client: Detect cross-origin requests

What does the global styleguide say about this? anything? if not, I feel like I remember someone saying something about not liking the mentioned way