Re: File API: why is there same-origin restriction on blob URLs?

On Fri, Mar 29, 2013 at 10:17 AM, Jonas Sicking <> wrote:

>  What I'm saying if that different browsers behave differently here.
> Requiring the crossorigin attribute might be your opinion on how to solve
> it, but its not matching how any browsers treat data: URLs right now.
We're talking about changing the behavior of blob URLs, not about data:

This isn't my opinion; I'm just explaining what the spec currently says.
Drawing cross-origin images always taint the canvas, and <img crossorigin>
is used to prevent that, by effectively changing the image's origin ( "for images").

Glenn Maynard

Received on Friday, 29 March 2013 23:09:27 UTC