W3C home > Mailing lists > Public > www-style@w3.org > July 2011

Re: [css3-images] Using SVG Paint Servers as <image>

From: Alan Gresley <alan@css-class.com>
Date: Fri, 15 Jul 2011 14:12:26 +1000
Message-ID: <4E1FBE2A.3090506@css-class.com>
To: robert@ocallahan.org
CC: "Tab Atkins Jr." <jackalmage@gmail.com>, www-style list <www-style@w3.org>
On 15/07/2011 12:12 PM, Robert O'Callahan wrote:
> Actually there is a problem, which is that external resource document loads
> and image loads are different beasts right now and are implemented somewhat
> differently in Gecko, and it would be a lot of work to determine if they can
> be made perfectly consistent. One issue is that we impose a same-origin
> restriction on SVG external resource loads, but not CSS image loads
> obviously.
> Maybe we can get away with saying that url() with a fragment reference is an
> external resource document load, and url() without a fragment reference is
> an image load.
> Rob

What about element(). Does it have same-origin restrictions?

Evil document has this CSS and HTML.

div {
   background: element(http://goodbank.com/foo.html#header);

button, input {
   color: transparent;
   background: transparent;
   border-color: transparent;
   position: /* where appropriate */

   <input />
   <input />
   <button />

Alan Gresley
Received on Friday, 15 July 2011 04:12:57 UTC

This archive was generated by hypermail 2.4.0 : Monday, 23 January 2023 02:14:02 UTC