title: How does Firebase handle cross origin issues?
body: <p>Looking through the <a href="http://www.firebase.com">Firebase</a> FAQ I can't see how cross domain issues are handled. Obviously, we don't want to serve on the Firebase domain, is it <a href="http://en.wikipedia.org/wiki/Cross-origin_resource_sharing">CORS</a>, hidden iFrame, other? Would we need to create a sub-domain that points at the IP of the sharing server?</p>