since we're now cross origin isolated, cross origin resources must be…

… loaded with crossOrigin=anonymous or be served with CORP header "cross-origin"

js/defaults.js

@@ -40,7 +40,11 @@ var defaults = {
   highlightWindowSize: 2,
 };
 
-var getSingletonAudio = lazy(() => new Audio());
+var getSingletonAudio = lazy(() => {
+  const audio = new Audio()
+  audio.crossOrigin = "anonymous"
+  return audio
+})
 var getSilenceTrack = lazy(() => makeSilenceTrack())
 
 setupDarkMode()