W3C home > Mailing lists > Public > public-media-capture@w3.org > February 2015

Re: FPWD of Media Capture From DOM elements published

From: Anne van Kesteren <annevk@annevk.nl>
Date: Sat, 21 Feb 2015 08:52:57 +0100
Message-ID: <CADnb78iuj85AL5-Ygs_+_X+fPeZFMUkB9J0zZ8Z4PkcWDQuWGw@mail.gmail.com>
To: Dominique Hazael-Massieux <dom@w3.org>
Cc: "public-media-capture@w3.org" <public-media-capture@w3.org>
On Fri, Feb 20, 2015 at 8:26 PM, Dominique Hazael-Massieux <dom@w3.org> wrote:
>  http://www.w3.org/TR/2015/WD-mediacapture-fromelement-20150219/

I skimmed through this, but it seems CanvasCaptureMediaStream has a
security bug. There's only a security check done upon generating the
object, but not afterwards. And actually, reading further it seems a
similar issue is applicable to the media elements as "[c]hanges in the
media element source do not cause the stream to terminate".


-- 
https://annevankesteren.nl/
Received on Saturday, 21 February 2015 07:53:20 UTC

This archive was generated by hypermail 2.3.1 : Saturday, 21 February 2015 07:53:21 UTC