I'm building a google gadget application that needs to interact with my server. However, I need to enable cross-domain requests on my scripts to allow for this:
header('Access-Control-Allow-Origin: *');
I'd like to only open up requests originating from Google but setting the following value does not work: header('Access-Control-Allow-Origin: google.com');
What should I be setting to make this work for google gadgets?