Issue metadata
Sign in to add a comment
|
Inline SVG in css url() causing error (regression)
Reported by
terrence...@gmail.com,
Sep 19 2016
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36 Example URL: https://jsfiddle.net/bjs2tjmp/ Steps to reproduce the problem: 1. Open provided JS fiddle link 2. Look at dev tools console 3. Notice error "Unsafe attempt to load URL ..." What is the expected behavior? No error, as per the other browsers and all previous versions of Chrome. What went wrong? In previous versions of Chrome (and all other browsers), this setup does not cause any sort of error in the console or otherwise. Does it occur on multiple sites: Yes Is it a problem with a plugin? No Did this work before? Yes Previous version Does this work in other browsers? Yes Chrome version: 53.0.2785.116 Channel: stable OS Version: 6.1 (Windows 7, Windows Server 2008 R2) Flash Version: Shockwave Flash 23.0 r0
,
Sep 19 2016
For whatever reason we consider inline SVG, which must be from the same domain, to not be. Requesting a bisect to figure out when this changed.
,
Sep 19 2016
This is likely a change from the 'filter' unprefixing - before then we wouldn't even attempt to load this URL. This is essentially the same issue as bug 518038.
,
Sep 19 2016
,
Sep 20 2016
Able to reproduce the issue on Win 10,Ubuntu 14.04 and mac 10.11.6 using stable 53.0.2785.116 and canary 55.0.2865.0. This is a regression issue broken in M53. Bisect info: ================== Good: 53.0.2773.0 Bad: 53.0.2774.0 Bisected using the new script and below is the CL : https://chromium.googlesource.com/chromium/src/+log/0db5bf84accda2f525619d6b4761789d28bfe5a2..7a0f0e2eb0abdd68fb377d5b789682acfe10757d Suspect : https://codereview.chromium.org/2065593002 fs@opera.com : Could you please take a look into this if its related to your change.
,
Sep 20 2016
Yes, that matches my suspicion in c#3. I'm going to dupe against the bug mentioned there.
,
Apr 5 2017
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by dtapu...@chromium.org
, Sep 19 2016