On 5/16/14, 11:08 AM, Anne van Kesteren wrote:
Not tainting <canvas>? Same-origin <iframe>? Doesn't matter?
The same-origin <iframe> bit. I think everyone is on board with not tainting <canvas> for data: things.
-Boris
On 5/16/14, 11:08 AM, Anne van Kesteren wrote:
Not tainting <canvas>? Same-origin <iframe>? Doesn't matter?
The same-origin <iframe> bit. I think everyone is on board with not tainting <canvas> for data: things.
-Boris