From what I understand about CORS, this is how it works: I have a site foo which serves a page X. X wan