In the second paragraph of section 4.1, the pronoun 'their' in "their values"
is ambiguous. Presumably their refers to the associated origin and base URL
mentioned in the previous paragraph, but it also may refer to "each
XMLHttpRequest object". I suggest you combine the first and second paragraphs,
and perhaps substitute "value of origin and base URL" for "their values".