HTML5: Cross-site HTTP requests with credentials: https://developer.m…
Flash: Check, if object, returned by getFile() in UploadProcess event…
…, is not undefined
you need to add the "withCredentials" flag after xhr.open("post", url, true); (line 729 in your changed file). Otherwise it will throw InvalidStateError in IE10 (and safari mobile 5)
Plupload 2 supports CORS. Original version (1.x branch) is now frozen and accepts only bug fixes.