Cross-origin resource sharing: arbitrary origin trusted