fix web sdk (CORS for getblobobjectbyid)