ServiceWorker gets all (x-origin) requests.

This is very far from the spec – there are no CrossOriginResponse
objects and I haven't tested using the worker to cache or match
x-origin URLs.