Re: [css4-images] support for SVG Paint Servers without element() from Boris Zbarsky on 2012-10-26 (www-style@w3.org from October 2012)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Thu, 25 Oct 2012 20:39:31 -0400
To: Dirk Schulze <dschulze@adobe.com>
CC: "www-style@w3.org" <www-style@w3.org>
Message-ID: <5089DBC3.7070807@mit.edu>

On 10/25/12 6:33 PM, Dirk Schulze wrote:
> I'll bring it up on the next SVG telcon. An example document with security issue would still be useful.

I don't have one offhand, sorry.  But basically, any time you have an 
SVG that you care about other sites getting info out of, you have a 
problem if cross-origin loads of masks and the like are allowed.

-Boris

Received on Friday, 26 October 2012 00:40:01 UTC