[Webkit-unassigned] [Bug 59972] [Qt] QtWebKit bridge assignToHTMLImageElement() results in Image with different SecurityOrigin

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu May 19 14:35:50 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=59972





--- Comment #1 from Andrew Wason <rectalogic at rectalogic.com>  2011-05-19 14:35:51 PST ---
Setting the documents URL on the CachedImage (as discussed in bug #60770) does not fix this because the StillImage the bridge creates returns false from Image::hasSingleSecurityOrigin().

So even when the CachedImage::response().url() passes checks in CanvasRenderingContext::checkOrigin(KURL&), we still end up tainting the canvas in CanvasRenderingContext::checkOrigin(HTMLImageElement*):

    if (canvas()->originClean() && !cachedImage->image()->hasSingleSecurityOrigin())
        canvas()->setOriginTainted();

Should StillImage override hasSingleSecurityOrigin() to return true like BitmapImage does?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list