[GM.xmlHttpRequest API](https://github.com/greasemonkey/greasemonkey/blob/master/src/bg/on-user-script-xhr.js) allows requests to cross the same origin policy boundaries. But native xmlHttpRequest doesn't.
GM.xmlHttpRequest API allows requests to cross the same origin policy boundaries. But native xmlHttpRequest doesn't.