W3C home > Mailing lists > Public > www-style@w3.org > July 2011

Re: [css3-images] Using SVG Paint Servers as <image>

From: Alan Gresley <alan@css-class.com>
Date: Fri, 15 Jul 2011 14:12:26 +1000
Message-ID: <4E1FBE2A.3090506@css-class.com>
To: robert@ocallahan.org
CC: "Tab Atkins Jr." <jackalmage@gmail.com>, www-style list <www-style@w3.org>
On 15/07/2011 12:12 PM, Robert O'Callahan wrote:
> Actually there is a problem, which is that external resource document loads
> and image loads are different beasts right now and are implemented somewhat
> differently in Gecko, and it would be a lot of work to determine if they can
> be made perfectly consistent. One issue is that we impose a same-origin
> restriction on SVG external resource loads, but not CSS image loads
> obviously.
>
> Maybe we can get away with saying that url() with a fragment reference is an
> external resource document load, and url() without a fragment reference is
> an image load.
>
> Rob


What about element(). Does it have same-origin restrictions?

Evil document has this CSS and HTML.


div {
   background: element(http://goodbank.com/foo.html#header);
}

button, input {
   color: transparent;
   background: transparent;
   border-color: transparent;
   position: /* where appropriate */
}

<div>
   <input />
   <input />
   <button />
   ......
<div>




-- 
Alan Gresley
http://css-3d.org/
http://css-class.com/
Received on Friday, 15 July 2011 04:12:57 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 17:20:42 GMT