Is there a way to allow multiple cross-domains using the Access-Control-Allow-Origin header?
Access-Control-Allow-Origin
I\'m aware of the *, but it is too open. I rea
*
Google's support answer on serving ads over SSL and the grammar in the RFC itself would seem to indicate that you can space delimit the URLs. Not sure how well-supported this is in different browsers.