gecko-dev/content/canvas
Benoit Jacob 01fae250a5 Bug 656277 - Prevent loading WebGL textures from cross-domain images - r=bzbarsky, a=jpr
This blocks using cross-domain images and tainted canvases as WebGL textures, in response to a timing attack allowing to get approximations of cross domain images' pixel data.

This is known to break legitimate Web content (e.g. bug 662570), so it's sad to have to land this. In the hopefully near future, a way forward will be implemented allowing affected Web content to resume working: we will allow cross-domain textures that have CORS approval. This is being coordinated with other WebGL implementers on the WebGL mailing lists.
2011-06-07 13:47:54 -04:00
..
crashtests Bug 647480 - Don't try to create a textrun using a null font. Setup a default font also when there is no pres shell. r=jfkthame 2011-04-10 22:01:01 +02:00
public Bug 266236 part 3: Mechanical rename of nsIRenderingContext and nsThebesRenderingContext to nsRenderingContext. Mechanical substitution of nsRefPtr<nsRenderingContext> for nsCOMPtr<nsRenderingContext>. 2011-04-07 18:04:40 -07:00
src Bug 656277 - Prevent loading WebGL textures from cross-domain images - r=bzbarsky, a=jpr 2011-06-07 13:47:54 -04:00
test Bug 656277 - Prevent loading WebGL textures from cross-domain images - r=bzbarsky, a=jpr 2011-06-07 13:47:54 -04:00
Makefile.in bug 461395 - add support for PARALLEL_DIRS to build system, parallelize content. r=bsmedberg 2008-10-30 13:02:14 -04:00