[Webkit-unassigned] [Bug 15443] SVGImage does not support sub-resource loading

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=15443


Martijn <martijn+webkitbugzilla at thany.nl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |martijn+webkitbugzilla at than
                   |                            |y.nl




--- Comment #25 from Martijn <martijn+webkitbugzilla at thany.nl>  2014-07-11 02:25:24 PST ---
(In reply to comment #24)
> SVGImages should never load sub resources. This is part of the security strategy.

This is bollocks.

An HTML page can load css, and so should an SVG. There is no more security concern on loading css from a, SVG than there is from loading one from HTML.

On top of that, it breaks (or not-fully-implements) the standard.

On top of that, IE11 applies external stylesheets just fine. Do you want Microsoft to be better?

On top of that, this makes having multiple SVG assets with a single stylesheet impossible. We'll have to write a Grunt script of sorts to embed a stylesheet generated from SASS into the corresponding SVG files. This is an absolutely horrible workaround that increases bandwidth usage and takes up valuable time.

On top of that yet again, if there is some sort of security concern. Fix that. Don't remove a feature because one tinywiny part of it might possible have a chance of doing something naughty.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.