[Webkit-unassigned] [Bug 131033] Security Policy error when using MathML in canvas

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=131033


Frédéric Wang <fred.wang at free.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
         AssignedTo|webkit-unassigned at lists.web |fred.wang at free.fr
                   |kit.org                     |
 Attachment #228283|0                           |1
        is obsolete|                            |




--- Comment #3 from Frédéric Wang <fred.wang at free.fr>  2014-04-07 06:45:48 PST ---
Created an attachment (id=228731)
 --> (https://bugs.webkit.org/attachment.cgi?id=228731&action=review)
Patch V2

This one keeps forbidding XHTML but allow some MathML.

Example: https://www.youtube.com/watch?v=sN4E090yKOw

Below is an overview of the MathML supported in WebKit.

Most MathML elements are just allowing some specific math layout:

- math: the MathML root
- msubsup, mover, munder, munderover, msub, msup, mmultiscripts, mprescripts, none: draw scripted expressions
- mtable, mtr, mtd: same as HTML tables.
- mfrac: draw a fraction.
- msqrt, mroot: draw radicals
- merror: draw an error message (specific style)
- mphantom: make the invisible content
- mrow: container to group expressions
- menclose: strikeout some content, or add a frame etc
- mfenced: draw fenced expressions ; equivalent to mrow+mo
- mspace: adjust formula spacing

Some elements are a bit more special:

- maction: add some basic interactivity (useless for SVGImage, though).
- mstyle: allow to apply style attribute to content e.g. mathcolors, mathbackground etc (this is not the same as HTML <style>)
- mi, mn, mo, mtext: containers for text. they can also contain "phrasing content" (http://www.w3.org/TR/html5/dom.html#phrasing-content-1)
- semantics, annotation, annotation-xml: attach some annotations to a MathML formula (e.g. LaTeX source). Note that annotation-xml can contain flow content (http://www.w3.org/TR/html5/dom.html#flow-content-1).

Most of the MathML attributes are specific to the elements above. Here are the generic presentation attributes:

- background, color, mathbackground, mathcolor: change the colors
- dir: change the directionality
- fontfamily, fontsize, fontstyle, fontweight, mathsize: change font properties
- mathvariant: change the style of math characters
- href: not supported (https://bugs.webkit.org/show_bug.cgi?id=85733), but we can just forbid it.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.