Experimented (but didn't test) support for CORS.