Update Canvas.js

Support Canvas Security Limit. http://www.w3.org/TR/cors/