selfRequestsOnly
defaults to false, if set to true will only allow AJAX requests to the same domain as the current document
defaults to false, if set to true will only allow AJAX requests to the same domain as the current document