See https://tools.ietf.org/html/draft-ietf-httpbis-origin-frame-06