W3C home > Mailing lists > Public > www-style@w3.org > October 2012

Re: [css4-images] support for SVG Paint Servers without element()

From: Robert O'Callahan <robert@ocallahan.org>
Date: Thu, 25 Oct 2012 10:51:14 +1300
Message-ID: <CAOp6jLaJcuMuOOcUv+_vPkegmbf7N_oJ7q9hdYZu_o38zgzsRg@mail.gmail.com>
To: Dirk Schulze <dschulze@adobe.com>
Cc: "www-style@w3.org list" <www-style@w3.org>
On Wed, Oct 24, 2012 at 4:19 AM, Dirk Schulze <dschulze@adobe.com> wrote:

> Btw. you will run into the same problem with the 'fill' and 'stroke'
> properties. Both will take a paint server reference and a <image> value in
> SVG 2. (Resolved during the last SVG F2F.) This is why it makes more sense
> to be consistent IMO.
>

That is a big problem :-(. I'll bring it up with the SVG working group.

Apart from what I already mentioned, we apply a same-origin restriction
when loading external resource documents but not when loading images. The
latter can't be changed without breaking compat, but changing the former
may expose security issues.

Rob
-- 
“You have heard that it was said, ‘Love your neighbor and hate your enemy.’
But I tell you, love your enemies and pray for those who persecute you,
that you may be children of your Father in heaven. ... If you love those
who love you, what reward will you get? Are not even the tax collectors
doing that? And if you greet only your own people, what are you doing more
than others?" [Matthew 5:43-47]
Received on Wednesday, 24 October 2012 21:51:42 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 17:21:01 GMT