Re: FPWD of Media Capture From DOM elements published from Anne van Kesteren on 2015-02-21 (public-media-capture@w3.org from February 2015)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Sat, 21 Feb 2015 08:52:57 +0100
To: Dominique Hazael-Massieux <dom@w3.org>
Cc: "public-media-capture@w3.org" <public-media-capture@w3.org>
Message-ID: <CADnb78iuj85AL5-Ygs_+_X+fPeZFMUkB9J0zZ8Z4PkcWDQuWGw@mail.gmail.com>

On Fri, Feb 20, 2015 at 8:26 PM, Dominique Hazael-Massieux <dom@w3.org> wrote:
>  http://www.w3.org/TR/2015/WD-mediacapture-fromelement-20150219/

I skimmed through this, but it seems CanvasCaptureMediaStream has a
security bug. There's only a security check done upon generating the
object, but not afterwards. And actually, reading further it seems a
similar issue is applicable to the media elements as "[c]hanges in the
media element source do not cause the stream to terminate".


-- 
https://annevankesteren.nl/

Received on Saturday, 21 February 2015 07:53:20 UTC