Very extensive post about CORS. This is fairly complete and shows how quickly it can become complicated.
