git://git.webkit.org
/
WebKit-https.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
A canvas should not be tainted if it draws a data URL SVGImage with a <foreignObject>
[WebKit-https.git]
/
Source
/
WebCore
/
html
/
canvas
/
CanvasRenderingContext.cpp
diff --git
a/Source/WebCore/html/canvas/CanvasRenderingContext.cpp
b/Source/WebCore/html/canvas/CanvasRenderingContext.cpp
index
2a6c768
..
8582a06
100644
(file)
--- a/
Source/WebCore/html/canvas/CanvasRenderingContext.cpp
+++ b/
Source/WebCore/html/canvas/CanvasRenderingContext.cpp
@@
-81,6
+81,9
@@
bool CanvasRenderingContext::wouldTaintOrigin(const HTMLImageElement* element)
if (!image)
return false;
+ if (image->sourceURL().protocolIsData())
+ return false;
+
if (!image->hasSingleSecurityOrigin())
return true;