fix issue with cors and file:

[soldair]

@Haifisch and others have hit this. i should try and hack shoe