I'm now doing everything client-side using JQuery and <script> tags to get around cross-domain XHR limitations. Now Google can't block it. :)
JQuery's $.ajax API handles it automatically for you too (if you use the 'jsonp' or 'script' dataType options), which is very nice.