Unless you have a firewall or are on an internal network...
What does being on an internal network have to do with anything? The connection is between the customer's browser and his bitcoin client over the loopback address.
If someone has a personal firewall program he's already had to intervene to allow it to listen on port 8333 so it would just be a matter of letting it listen on another port.