[Webkit-unassigned] [Bug 53435] WOFF fonts loaded through @font-face should have Same Origin Restrictions

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=53435





--- Comment #2 from Tab Atkins <tabatkins at google.com>  2011-01-31 13:25:23 PST ---
Right.  Per IRC conversation, the major problem seems to be a spec one.  If you only apply SOR to WOFF fonts and not others, then you can't tell ahead of time that you need to make a CORS request.  There are then some architectural issues surrounding exactly how you're supposed to handle CORS if you have to request the resource first.

Firefox (and presumably IE9) don't have this issue, as they just apply SOR to everything piped through @font-face.  This would also be an acceptable solution, but in IRC discussion you seemed resistant to this as well (I didn't press on that issue as I didn't have time).  I don't see anything particularly wrong with this.  Could you elaborate on your objections in this vein?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.