Re: [w3ctag/design-reviews] CORS Requirement for 3rd party sources in <model> tag (Issue #775)

> As @plinss mentioned, we have to do that anyway for legacy technologies like "image, video, audio, and script elements" .

No, those are very different.

If it's the same as those you'd have to use CORS as otherwise attackers can get at the data way too easily.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/775#issuecomment-1279150015
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/775/1279150015@github.com>

Received on Friday, 14 October 2022 15:23:56 UTC