[webkit-dev] Same Origin Restriction on WOFF fonts across WebKit

[Adam Barth]

On Fri, Jan 28, 2011 at 3:11 PM, Maciej Stachowiak <mjs at apple.com> wrote:
> On Jan 28, 2011, at 3:06 PM, Tab Atkins Jr. wrote:
>> The WOFF font specification requires that browsers apply Same Origin
>> Restrictions (SOR) to WOFF fonts.  So far, Firefox and IE9 follow this
>> requirement, while we and Opera don't.
>>
>> As far as I know, our lack of SOR is basically an accident; we
>> implemented support for WOFF before this requirement was added, and
>> just haven't gotten around to adding it in yet.
>>
>> Chrome people seem amenable to applying SOR to WOFF fonts in Chrome.
>> Is it okay to add this across all our webkit ports?
>
> It's not an accident. It has been our intent to willfully ignore this requirement.

What's the long-term plan here?  Are we hoping the other folks will
come around to this point of view eventually?  From a game-theory
point-of-view, it seems likely that the most permissive behavior is
likely to become wide-spread over time.

Adam