On 5/16/14, 11:08 AM, Anne van Kesteren wrote:
Not tainting <canvas>? Same-origin <iframe>? Doesn't matter?

The same-origin <iframe> bit. I think everyone is on board with not tainting <canvas> for data: things.

-Boris


Reply via email to