This is a follow on to bug 50773 which addresses the issue in one place in DocumentLoader but not the place that would fix the issue for worker.importScript.
Perhaps this is by design. Adding Adam so he can set me straight.
Generally, requests get an origin header if their method isn't GET or HEAD or if they're using CORS. My understanding is that importScript is a GET request and does not use CORS. Therefore, it doesn't need an Origin header.
ok, this is invalid.