Re: Steps to creating a browser standard for the moz-icon:// scheme from Boris Zbarsky on 2010-01-28 (public-webapps@w3.org from January to March 2010)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Wed, 27 Jan 2010 21:47:19 -0500
To: Jonas Sicking <jonas@sicking.cc>
CC: public-webapps <public-webapps@w3.org>
Message-ID: <4B60FAB7.4020506@mit.edu>

On 1/27/10 9:32 PM, Jonas Sicking wrote:
> Indeed. I think we should make these urls never be considered
> same-origin as any other origin. Thus a canvas would always get its
> taint bit set if an icon is drawn.

Note that this is effectively the case in Gecko (since -moz-icon URIs 
have no host, so never test equal to anything else in terms of origin).

-Boris

Received on Thursday, 28 January 2010 02:52:06 UTC