Try to abuse jsonp
Didn't think this would work, but was worth spending 5 mins just in case