Allow some more syscalls.
Allow cross-domain AJAX from file:///
Add a major FIXME.