It's working on desktop apparently. But doesn't work at all on this iPad.
A test resource apparently has the appropriate headers.
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
What else is needed?
//EDIT///
Cache clear works just fine. & root level crossdomain.xmls take precedence.