This does not work across domains, guys. (Among other reasons, it would turn injection attacks into $X million bugs for some companies.)