Re: What constitutes protection [was: About using CORS]

Garrick Van Buren wrote:

> >> Yes - and the day I upgraded, it broke a significant portion of my work.
> > Not sure I understand what broke: did Firefox support fonts cross-domain 
> > before it implemented SOR ?
> 
> Yes. Firefox supported cross-domain before it implemented SOR.

I don't think this is right.  I wrote the code for the Firefox
implementation and I don't recall there being a point at which font
loading worked without a same-origin restriction.  There may have been
test builds but certainly never anything in a beta or release build.

You can see the progression of patches in the bug below.  Click on "Show
Obsolete" in the attachments section and you'll see "version 0.9
implement same-site restriction":

https://bugzilla.mozilla.org/show_bug.cgi?id=441473

Cheers,

John Daggett

Received on Wednesday, 5 May 2010 06:01:11 UTC