Confirmed users
753
edits
Platform/GFX/2011-May-9: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 9: | Line 9: | ||
** Need to fix INVALID_FRAMEBUFFER_OPERATION error then run reftests. | ** Need to fix INVALID_FRAMEBUFFER_OPERATION error then run reftests. | ||
* WebGL cross-domain image theft vulnerability (bjacob, jrmuizel) | * WebGL cross-domain image theft vulnerability (bjacob, jrmuizel) | ||
** proof of concept: http://www.contextis.co.uk/resources/blog/webgl/ | ** proof of concept: http://www.contextis.co.uk/resources/blog/webgl/poc/index.html | ||
** Best option at the moment seems to be to forbid loading textures from cross-domain images without CORS approval. | ** Best option at the moment seems to be to forbid loading textures from cross-domain images without CORS approval. | ||
** Must block usage of a canvas 2D context as proxy to work around this security measure. | ** Must block usage of a canvas 2D context as proxy to work around this security measure. | ||