$wgAllowCrossOrigin