Even relative asset URLs need CORS if widget is on a different domain #68
Description
Doh. I just realized that loading assets on the same server as the widget embedder don't actually work unless the widget itself is hosted on the same server too.
It might be nice to proxy any XHRs through the embedder's window...
Urg. This is a really obvious use-case, I'm not sure how I missed it before. Weird.