2nd attempt at crossdomain
update markdown
note source code origin
try to fix CORS