Same origin policy means that you can't do real XHR to a remote
server, but there are a few workarounds:
1. Use the local server as a proxy. Do an XHR post to the local
server, and then have that server turn around and post the data to the
central server.
2. Use a script tag instead of XHR. This is a good technique for cross-
site javascript when the request data is simple, but since you're
limited to using the query string, it's not a good solution for
sending actual files.
3. Use a hidden form and iframe. Do all your image manipulation
locally, then if you need to send something to a remote server, base64
the blob, attach that to a form and post to an iframe.