[Fix] Specify anonymous cross origin for gsplat assets to avoid security issues on iOS (#8235)

Co-authored-by: Martin Valigursky <[email protected]>

Author: mvaligursky

src/framework/parsers/sog-bundle.js

@@ -210,6 +210,8 @@ class SogBundleParser {
                         contents: file.data
                     }, {
                         mipmaps: false
+                    }, {
+                        crossOrigin: 'anonymous'
                     });
                 } else {
                     // file doesn't exist in bundle, treat it as a url
@@ -219,6 +221,8 @@ class SogBundleParser {
                         filename
                     }, {
                         mipmaps: false
+                    }, {
+                        crossOrigin: 'anonymous'
                     });
                 }
 

src/framework/parsers/sogs.js

@@ -133,6 +133,8 @@ class SogsParser {
                     filename
                 }, {
                     mipmaps: false
+                }, {
+                    crossOrigin: 'anonymous'
                 });
 
                 const promise = new Promise((resolve, reject) => {