test "phantomjs --web-security=no"

gistfile1.js

var page = require('webpage').create();
page.settings.loadImages = false;
page.onConsoleMessage = function(msg) { console.log(msg); };

var count = 0;
page.onLoadFinished = function() {
    (0 == count++) && page.evaluate(function() {
        // cross-domain iframe access
        var i = document.createElement('iframe');
        i.src = 'http://www.phantomjs.org/';
        i.onload = function() {
            console.log('get document in cross-domain iframe: ' + this.contentWindow.document);
        };
        document.body.appendChild(i);

        // cross-domain XMLHttpRequest
        var xhr = new XMLHttpRequest();
        xhr.onreadystatechange = function(e) {
            if (xhr.readyState == 4 && xhr.status == 200) {
                console.log('get text by cross-domain XMLHttpRequest: ' + xhr.responseText.substring(0, 15));
            }
        };
        xhr.open('get', 'http://www.phantomjs.org/', true);
        xhr.send();
    });
};

page.open('http://www.google.com/');