W3C home > Mailing lists > Public > www-font@w3.org > April to June 2010

Re: What constitutes protection [was: About using CORS]

From: John Daggett <jdaggett@mozilla.com>
Date: Tue, 4 May 2010 23:00:38 -0700 (PDT)
To: Garrick Van Buren <garrick@kernest.com>
Cc: www-font@w3.org
Message-ID: <2078016255.116327.1273039238124.JavaMail.root@cm-mail03.mozilla.org>
Garrick Van Buren wrote:

> >> Yes - and the day I upgraded, it broke a significant portion of my work.
> > Not sure I understand what broke: did Firefox support fonts cross-domain 
> > before it implemented SOR ?
> Yes. Firefox supported cross-domain before it implemented SOR.

I don't think this is right.  I wrote the code for the Firefox
implementation and I don't recall there being a point at which font
loading worked without a same-origin restriction.  There may have been
test builds but certainly never anything in a beta or release build.

You can see the progression of patches in the bug below.  Click on "Show
Obsolete" in the attachments section and you'll see "version 0.9
implement same-site restriction":



John Daggett
Received on Wednesday, 5 May 2010 06:01:11 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 22:37:34 UTC