Re: [csswg-drafts] [css-images] image-orientation:none violates same-origin policy (#5165) from Anne van Kesteren via GitHub on 2020-07-06 (public-css-archive@w3.org from July 2020)

From: Anne van Kesteren via GitHub <sysbot+gh@w3.org>
Date: Mon, 06 Jul 2020 08:05:48 +0000
To: public-css-archive@w3.org
Message-ID: <issue_comment.created-654082683-1594022747-sysbot+gh@w3.org>

I don't want to drag a dependency on CORP into this. That would change its semantics from a boolean check in fetch to a property of the response. All CORP: cross-origin means is that you're okay being side-channel attacked. This is not a side channel.

-- 
GitHub Notification of comment by annevk
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5165#issuecomment-654082683 using your GitHub account

Received on Monday, 6 July 2020 08:05:49 UTC