To prevent malicious users injecting arbitrary GLTF files. Default to the same domain as the script source?
To prevent malicious users injecting arbitrary GLTF files.
Default to the same domain as the script source?