Cross origin apparently makes the data uri's fail

We need to intelligently apply the cross origin thing if the uri is a data uri vs. a remote web address.
Update object properties when the replace_obj event is triggered.