<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Hrm I don’t know such vulnerabilities.</div><div class="">In my humble opinion, if there is a security hole, it should be fixed in jxrlib as other image libraries do.</div><div class="">Of course if the hole is caused by webkit glue layer, it should be fixed in webkit side.Is there any reason that jxr is special here?</div><div class="">I think the security risk is not only for jxrlib. In my view, jxrlib doesn’t has especially more vulnerabilities than others.</div><div class="">If so, we can report it to MS.</div><div class=""><br class=""></div><div class="">Here is a single page you want. =)</div><div class=""><a href="http://cloudinary.com/blog/jpeg_xr_conversion_with_auto_browser_detection_optimize_images_for_ie_users" class="">http://cloudinary.com/blog/jpeg_xr_conversion_with_auto_browser_detection_optimize_images_for_ie_users</a></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span class="Apple-style-span" style="font-family: Helvetica, '맑은 고딕', verdana, 돋움, arial, 굴림체; color: rgb(97, 97, 97); font-size: x-small;"><font color="#1f497d" size="2" class="">ChangSeok</font></span><br class=""></div></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Apr 1, 2015, at 11:35 PM, Martin Robinson <<a href="mailto:mrobinson@webkit.org" class="">mrobinson@webkit.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">I think it's also important to weigh potential new security</span><br style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">vulnerabilities as well. My understanding is that image decoders have</span><br style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">been a source of issues in the past. Can we find an example of a</span><br style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">single page with JPEG-XR images embedded into the page content?</span><br style="font-family: AppleSDGothicNeo-Regular; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""></div></blockquote></div><br class=""></body></html>