On 1/27/10 9:32 PM, Jonas Sicking wrote:
Indeed. I think we should make these urls never be considered same-origin as any other origin. Thus a canvas would always get its taint bit set if an icon is drawn.
Note that this is effectively the case in Gecko (since -moz-icon URIs have no host, so never test equal to anything else in terms of origin).
-Boris
