[Webkit-unassigned] [Bug 104111] REGRESSION (r129585): Cannot load DATA URI resources within the context of an SVG image

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Feb 4 03:15:05 PST 2013


https://bugs.webkit.org/show_bug.cgi?id=104111





--- Comment #23 from George May <georgemay137 at yahoo.com>  2013-02-04 03:17:09 PST ---
(In reply to comment #22)
> (In reply to comment #20)
> > 
> > I should have been clearer: Mozilla chose to disallow data:uri images from themselves loading other data:uri images for reasons similar to Adam's objection (security complexity). This case is slightly different. I have a followup question though: did you intend to remove the chromium/ResourceHandle.cpp change from the patch?
> > 
> 
> No we didn't, we allow unlimited nesting of data URIs. The only restriction is that image files must be complete in the one file so you can't refer to anything in another file than the image file.

This is what my current patch is doing,
I assume any DATA URI resource is safe as it cannot leak data...

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list