I'd like to take this and separate the ports used for WUI pages and downloads.
I think I've read some parts of the affected code but would need some help on one part or another.
I could also try take a stab at the other referenced tickets, though I find this approach the most desirable, as browsers itself (regardless of vendor and version) enforce a strict separation between origins.