Description of the problem

The default crossOrigin of some *Loaders under examples/js/loaders are Anonymous while base Loader's is undefined.

IMO, crossOrigin of all *Loaders should be undefined for security and consistency.

If you folks agree with this, I'll make PR.

These loaders seems to have default Anonymous crossOrigin as far as I know from the grep command.

• AssimpJSONLoader
• AssimpLoader
• BinaryLoader
• ColladaLoader
• GLTFLoader
• MTLLoader
• VRMLLoader

Three.js version

• Dev
• r87
• ...

Browser

• All of them
• Chrome
• Firefox
• Internet Explorer

OS

• All of them
• Windows
• macOS
• Linux
• Android
• iOS

Hardware Requirements (graphics card, VR Device, ...)