[Webkit-unassigned] [Bug 53435] WOFF fonts loaded through @font-face should have Same Origin Restrictions

Mon Jan 31 14:34:17 PST 2011

https://bugs.webkit.org/show_bug.cgi?id=53435

--- Comment #4 from Maciej Stachowiak <mjs at apple.com>  2011-01-31 14:34:17 PST ---
(In reply to comment #2)
> Right.  Per IRC conversation, the major problem seems to be a spec one.  If you only apply SOR to WOFF fonts and not others, then you can't tell ahead of time that you need to make a CORS request.  There are then some architectural issues surrounding exactly how you're supposed to handle CORS if you have to request the resource first.
> 
> Firefox (and presumably IE9) don't have this issue, as they just apply SOR to everything piped through @font-face.  This would also be an acceptable solution, but in IRC discussion you seemed resistant to this as well (I didn't press on that issue as I didn't have time).  I don't see anything particularly wrong with this.  Could you elaborate on your objections in this vein?

It would be a regression in our existing @font-face support for TrueType, OpenType and SVG fonts.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.