[Webkit-unassigned] [Bug 103110] [Track] Video Text Tracks from cross-site are not loaded

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=103110





--- Comment #3 from Victor Carbune <victor at rosedu.org>  2013-01-06 14:50:59 PST ---
(In reply to comment #2)
> Thanks for the further analysis - I guess I just missed the crossorigin attribute, thinking that server setup with the HTTP headers was sufficient (Access-Control-Allow-Origin:*). I now understand that both are required to do cross-site loads. It's maybe because I have the HTTP header that the API loads it?
Indeed, the HTTP header is a pre-requisite for any CORS-enabled fetch,
but while it's enough for video, it doesn't seem to be enough for track.
(I'm not sure if this is the intention or it is a bug in the specification)

What I meant to say with the API loading is that currently setting the
crossorigin attribute enables both rendering and accessing the track
through the API in WebKit.

Intuitively, I would expect a track from a different origin to not be
accessible through the API, but just rendered (for copyright purposes?).

There's also a part of the spec trying to handle this aspect:
"[...] It can be CORS-same-origin or CORS-cross-origin; this affects whether
subtitles referenced in the media data are exposed in the API and, [...]"

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.