There are multiple possibilities when implementing a custom method for Extensibility.
Hexagon recommends that Extensibility code should always be hosted on a separate
server in a different domain. This can mitigate any browser security concerns.