Re: [whatwg] Fetch, MSE, and MIX from Ryan Sleevi on 2015-04-15 (public-webappsec@w3.org from April 2015)

From: Ryan Sleevi <sleevi@google.com>
Date: Wed, 15 Apr 2015 14:10:44 -0700
To: Martin Thomson <martin.thomson@gmail.com>
Cc: Anne van Kesteren <annevk@annevk.nl>, Domenic Denicola <d@domenic.me>, Matthew Wolenetz <wolenetz@google.com>, Aaron Colwell <acolwell@google.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>, WHATWG <whatwg@whatwg.org>, Brad Hill <hillbrad@gmail.com>, "public-html-media@w3.org" <public-html-media@w3.org>
Message-ID: <CACvaWvZtbTzVGMnMXiOU_O8WZJZm3Hyi+wEwEWx7bQ1i07XwLg@mail.gmail.com>

On Wed, Apr 15, 2015 at 2:04 PM, Martin Thomson <martin.thomson@gmail.com>
wrote:

> BTW, do you care that it might be possible to learn the length of the data?
>

Yes and no; you can already use <img> tags to leak information
(width/height).

Received on Wednesday, 15 April 2015 21:11:11 UTC