W3C home > Mailing lists > Public > public-css-archive@w3.org > August 2020

Re: [csswg-drafts] [css-images] image-orientation:none violates same-origin policy (#5165)

From: Phil Cunliffe via GitHub <sysbot+gh@w3.org>
Date: Thu, 20 Aug 2020 22:34:51 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-677940544-1597962889-sysbot+gh@w3.org>
@yoavweiss thanks for the clarification

There are implicitly 2 types of image metadata currently, stuff we are OK leaking like width and height, and things are aren't OK leaking which encompasses everything else. This suggestion wasn't popular last time but I'd contest that, as integral display data, orientation fits in the first category with width and height.

I understand the objections and that a lot of people would like to eliminate the width and height leak or even disallow cross-origin images all together but, if they're going to continue to be allowed then orientation value is essential to properly using them.

-- 
GitHub Notification of comment by philcunliffe
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5165#issuecomment-677940544 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Thursday, 20 August 2020 22:34:53 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:42:13 UTC