W3C home > Mailing lists > Public > public-webappsec@w3.org > June 2013

Re: [filter-effects][css-masking] Move security model for resources to CSP

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Sat, 01 Jun 2013 23:13:45 -0400
Message-ID: <51AAB869.1050605@mit.edu>
To: Dirk Schulze <dschulze@adobe.com>
CC: "public-webappsec@w3.org" <public-webappsec@w3.org>
On 6/1/13 11:11 PM, Boris Zbarsky wrote:
> That is my concern, precisely.  Once you have some piece of geometry
> being used as a clip, you can get its geometry information to whatever
> precision you want using elementFromPoint.  Furthermore, you can get
> color information too, using a combination of filters and
> pointer-events, as far as I can tell.  See
> http://lists.w3.org/Archives/Public/www-svg/2008Sep/0112.html

Er, sorry.  This was much more confused than I thought when I wrote it. 
  Let me try again.

If you have geometry being used as clip, you can get geometry 
information from it, but not color information.

If you have something being painted on top of other stuff, then 
combining filters and pointer-events seems like it can let you extract 
both geometry and color information.

-Boris
Received on Sunday, 2 June 2013 03:14:13 UTC

This archive was generated by hypermail 2.3.1 : Sunday, 2 June 2013 03:14:14 UTC