Add a ChromeOnly method called 'setOriginAttributes' on the XMLHttpRequest, so that we can override the origin attributes for those XHRs running by XUL (which will use System Principal).
ChromeUtils
Base64.h