Re: [MIX] Require HTTPS scripts to be able to anything HTTP scripts can do.

On Mon, Jan 5, 2015 at 7:06 PM, Boris Zbarsky <bzbarsky@mit.edu> wrote:
> That depends on whether the loading page has the "crossorigin" attribute on
> the image and whether the server sends the appropriate CORS headers.  If
> both those things are done, the page can get access to the image data from
> script.

I thought we disabled CORS cross-scheme?


-- 
https://annevankesteren.nl/