W3C home > Mailing lists > Public > public-webappsec@w3.org > April 2015

Re: [whatwg] Fetch, MSE, and MIX

From: Ryan Sleevi <sleevi@google.com>
Date: Wed, 15 Apr 2015 14:10:44 -0700
Message-ID: <CACvaWvZtbTzVGMnMXiOU_O8WZJZm3Hyi+wEwEWx7bQ1i07XwLg@mail.gmail.com>
To: Martin Thomson <martin.thomson@gmail.com>
Cc: Anne van Kesteren <annevk@annevk.nl>, Domenic Denicola <d@domenic.me>, Matthew Wolenetz <wolenetz@google.com>, Aaron Colwell <acolwell@google.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>, WHATWG <whatwg@whatwg.org>, Brad Hill <hillbrad@gmail.com>, "public-html-media@w3.org" <public-html-media@w3.org>
On Wed, Apr 15, 2015 at 2:04 PM, Martin Thomson <martin.thomson@gmail.com>

> BTW, do you care that it might be possible to learn the length of the data?

Yes and no; you can already use <img> tags to leak information
Received on Wednesday, 15 April 2015 21:11:11 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:48 UTC