Check for the Access-Control headers, see https://developer.mozilla.org/En/HTTP_access_control for explanation. Warn when they are too open.