- From: Alex Inkin via GitHub <sysbot+gh@w3.org>
- Date: Mon, 01 Jul 2019 13:56:22 +0000
- To: public-svg-issues@w3.org
waterplea has just created a new issue for https://github.com/w3c/svgwg: == Referencing SVGs through USE from other domains == Currently, trying to host SVGs with symbols on CDN and then using them on your page through USE tag to allow color changes with `currentColor` results with error: `Unsafe attempt to load URL`. There is a bug for chromium suggesting it should follow CORS policies providing ability to allow such references: https://bugs.chromium.org/p/chromium/issues/detail?id=470601 There was a suggestion to add crossorigin attribute to USE but it seems that specs only define it on IMAGE or SCRIPT: https://svgwg.org/svg2-draft/linking.html#processingURL-fetch Please have a look at it. Seems to me that it would be a lot safer to use SVGs like that rather than loading them with network request and inlining in the page which is a current workaround if you want to control the color. Please view or discuss this issue at https://github.com/w3c/svgwg/issues/707 using your GitHub account
Received on Monday, 1 July 2019 13:56:24 UTC