W3C home > Mailing lists > Public > public-css-archive@w3.org > July 2020

Re: [csswg-drafts] [css-images] image-orientation:none violates same-origin policy (#5165)

From: Anne van Kesteren via GitHub <sysbot+gh@w3.org>
Date: Mon, 06 Jul 2020 08:05:48 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-654082683-1594022747-sysbot+gh@w3.org> 
I don't want to drag a dependency on CORP into this. That would change its semantics from a boolean check in fetch to a property of the response. All CORP: cross-origin means is that you're okay being side-channel attacked. This is not a side channel.

-- 
GitHub Notification of comment by annevk
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5165#issuecomment-654082683 using your GitHub account
Received on Monday, 6 July 2020 08:05:49 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:42:11 UTC