feat(client/js/s3/uploader.basic.js): XDR enabled by default in a CORS environment