[Webkit-unassigned] [Bug 86817] Downloadable font loads should be subject to CORS

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=86817





--- Comment #3 from Edward O'Connor <eoconnor at apple.com>  2012-05-18 15:08:37 PST ---
Off-topic; just correcting Boris on this one point:

(In reply to comment #2)
> If you really do think the spec here should be changed, the right approach is to say so in the relevant standards group[...]

We (and others) have. Several people from multiple vendors pushed back on this and advocated for From-Origin for this case, at the joint Fonts/WebApps/WebAppSec meeting at TPAC last year.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.