um, cross origin blocking has been a thing for... like a really really long time now.