oyvindkinsey/easyXDM — comment on commit d672397a7fb5fc271ab72b880e3404540b5f8d6f
File: src/cors/index.html line 86
By jhf:

On Chrome 16.* this results in the error message:

Refused to set unsafe header "Origin"

It may be better to set a "safe" header, such that the value can be preserved, and recognized on server side.