Access location object from different origins doesn't raise SECURITY_ERR exception