title: Cross Domain Web Workers
body: <p>I am aware that this question might be considered duplicate, but it is a new technology and I can not find a recent confirmation of my findings. I also think it potentially useful to have all the error messages in one place (feel free to add any other browsers).</p>
  
  <p>trying to loads a worker script from another domain:</p>
  
  <p><code>new Worker('http://otherdomain.co/worker.js');</code></p>
  
  <p>I have set headers (using <a href="https://chrome.google.com/webstore/detail/modheader/idgpnmonknjnojddfkpgkljpfnnfcklj" rel="nofollow">ModHeader Chrome Extension</a>) to:</p>
  
  <p><code>
  Access-Control-Allow-Methods:*
  Access-Control-Allow-Origin:*</code></p>
  
  <p>But in Chrome I get:</p>
  
  <p><code>Uncaught SecurityError: Failed to construct 'Worker': Script at 'http:otherdomain.co/worker.js' cannot be accessed from origin</code></p>
  
  <p>Safari give me:</p>
  
  <p><code>[Error] SecurityError: DOM Exception 18: An attempt was made to break through the security policy of the user agent</code></p>
  
  <p>Firefox gives me:</p>
  
  <p><code>SecurityError: The operation is insecure.</code></p>
  
  <p>Is it still that this is not something we can do? If so, what is considered the best practise work around?</p>