Same origin:

Cross origin (if this page is loaded via regular http):