[Webkit-unassigned] [Bug 53435] WOFF fonts loaded through @font-face should have Same Origin Restrictions

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jan 31 14:21:53 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=53435





--- Comment #3 from Tab Atkins <tabatkins at google.com>  2011-01-31 14:21:53 PST ---
I just got confirmation that IE9 is indeed applying SOR to all @font-face resources, using Simple Requests <http://www.w3.org/TR/cors/#resource-requests>.  They even do it for EOT - they expect some minor breakage, but nearly all cross-origin font loads on the web so far are from font libraries, which are either already serving CORS headers, or only serve EOT to IE<9.

If both Firefox and IE consider the public-web breakage to be minimal enough to do SOR on all font requests, I don't see any reason we should disagree, given that they both have larger marketshare and thus more reason to break.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list