Not long ago was doing some AJAX code that would allow 3rd party sites load data from other site. Everything worked fine when having the "base site" and the "test sites" in same place, but when tryin to run that with 2 different domains.... no luck... Came out that "the browser security model does not allow using XMLHttpRequest (XHR) from one web page domain to contact an URL on another domain". Nice huh?

To see more details on it, visit this link.