Files
tubestation/content/canvas/test/webgl/conformance
Benoit Jacob 0aff55b5f2 Bug 656277 - Prevent loading WebGL textures from cross-domain images - r=bzbarsky, a=jpr
This blocks using cross-domain images and tainted canvases as WebGL textures, in response to a timing attack allowing to get approximations of cross domain images' pixel data.

This is known to break legitimate Web content (e.g. bug 662570), so it's sad to have to land this. In the hopefully near future, a way forward will be implemented allowing affected Web content to resume working: we will allow cross-domain textures that have CORS approval. This is being coordinated with other WebGL implementers on the WebGL mailing lists.
2011-06-07 13:47:54 -04:00
..