===== cors =====
==== disable in firefox ====
  - go to "about:config"
  - set "privacy.file_unique_origin" to false

==== disable in chrome ====
  - make a desktop shortcut with ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --disable-web-security --disable-gpu --user-data-dir=~/chromeTemp"