add a crossOrigin attribute for cross domain