another case for "phantomjs --web-security=no"

config.html

<script>
    var xhttp=new XMLHttpRequest();
    xhttp.open("GET","http://localhost:8888/start",false);
    xhttp.send();
    console.log(xhttp.responseText);
</script>

config.js

var page = require('webpage').create();
page.onConsoleMessage = function(msg) { console.log(msg); };
page.onLoadFinished = phantom.exit;
page.open("http://localhost:8888/config.html");