Skip to content

Commit

Permalink
security of drawimagedata
Browse files Browse the repository at this point in the history
git-svn-id: http://svn.whatwg.org/webapps@56 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed May 19, 2006
1 parent 56fec83 commit 12fd26e
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 8 deletions.
5 changes: 3 additions & 2 deletions index
Original file line number Diff line number Diff line change
Expand Up @@ -15501,7 +15501,8 @@ http://lxr.mozilla.org/mozilla/source/dom/public/idl/html/nsIDOMNSHTMLTextAreaEl
etc.

<p><strong>Security:</strong> To prevent <em>information leakage</em>, the
<code><a href="#todataurl">toDataURL()</a></code> methods should raise a
<code><a href="#todataurl">toDataURL()</a></code> and <code><a
href="#getimagedatasx">getImageData()</a></code> methods should raise a
<span>security exception</span> if the canvas ever had images painted on
it that originate from a domain other than the <span title="script's
domain"><a href="#domain0">domain of the script</a></span> that painted
Expand Down Expand Up @@ -16298,7 +16299,7 @@ interface <dfn id="imagedata">ImageData</dfn> {
with the top left corner at (0,0) and the width and height of the
coordinate space.

<p>The <dfn id="ispointinpath"
<p class="proposal">The <dfn id="ispointinpath"
title="isPointInPath"><code>isPointInPath(<var>x</var>,
<var>y</var>)</code></dfn> method must return true if the point given by
the <var>x</var> and <var>y</var> coordinates passed to the method, when
Expand Down
14 changes: 8 additions & 6 deletions source
Original file line number Diff line number Diff line change
Expand Up @@ -13577,11 +13577,12 @@ http://lxr.mozilla.org/mozilla/source/dom/public/idl/html/nsIDOMNSHTMLTextAreaEl
metadata, etc.</p>

<p><strong>Security:</strong> To prevent <em>information
leakage</em>, the <code>toDataURL()</code> methods should raise a
<span>security exception</span> if the canvas ever had images
painted on it that originate from a domain other than the <span
title="script's domain">domain of the script</span> that painted the
images onto the canvas.</p>
leakage</em>, the <code>toDataURL()</code> and
<code>getImageData()</code> methods should raise a <span>security
exception</span> if the canvas ever had images painted on it that
originate from a domain other than the <span title="script's
domain">domain of the script</span> that painted the images onto the
canvas.</p>

<h4>The 2D context</h4>

Expand Down Expand Up @@ -14354,7 +14355,8 @@ interface <dfn>ImageData</dfn> {
rectangle with the top left corner at (0,0) and the width and height
of the coordinate space.</p>

<p>The <dfn title="isPointInPath"><code>isPointInPath(<var>x</var>,
<p class="proposal">The <dfn
title="isPointInPath"><code>isPointInPath(<var>x</var>,
<var>y</var>)</code></dfn> method must return true if the point
given by the <var>x</var> and <var>y</var> coordinates passed to the
method, when treated as coordinates in the canvas' coordinate space
Expand Down

0 comments on commit 12fd26e

Please sign in to comment.