W3C home > Mailing lists > Public > whatwg@whatwg.org > June 2013

Re: [whatwg] font security on measureText

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Fri, 07 Jun 2013 22:31:11 -0400
Message-ID: <51B2976F.5040202@mit.edu>
To: Ian Hickson <ian@hixie.ch>
Cc: WHATWG <whatwg@whatwg.org>, Rik Cabanier <cabanier@gmail.com>
On 6/7/13 7:08 PM, Ian Hickson wrote:
> If browsers align on the above text the HTML spec indeed would no longer
> need to worry about this, since there'd no longer be any cross-origin
> fonts. Has this occurred?

No, though they have all in principle agreed that they plan to when they 
didn't object to the spec... it's not like it's a surprise, and has been 
the source of a good bit of discussion in the CSSWG.

> (Personally I don't really see why we'd limit this to same-origin and
> CORS-cross-origin only.

I suggest doing some background reading on that, then?  Again, it's been 
discussed to death.

-Boris
Received on Saturday, 8 June 2013 02:31:45 UTC

This archive was generated by hypermail 2.3.1 : Monday, 13 April 2015 23:09:22 UTC