In firefox, the only way to do cross domain xhr was to access a javascript object outside of the browser sandbox, make the call, then send the data back. I'd be pretty confident that google chrome's version would have the same security limitations.

Greasemonkey lets you do it - with GM_xmlhttpRequest:

http://diveintogreasemonkey.org/api/gm_xmlhttprequest.html