New issue
Advanced search Search tips

Issue 777081 link

Starred by 4 users

Issue metadata

Status: Available
Owner: ----
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Mac
Pri: 2
Type: Bug-Regression

Blocked on:
issue 792518



Sign in to add a comment

canvas filter url(SVGFilter) taints the canvas

Reported by tristan....@gmail.com, Oct 21 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:57.0) Gecko/20100101 Firefox/57.0

Steps to reproduce the problem:
1. set the canvas 2d Context filter property to 'url(#svg_filter_id)'
2. draw something on the canvas
3. grab the canvas content (e.g toDataURL or toBlob or getImageData)

What is the expected behavior?
We should get the canvas content.

What went wrong?
The canvas has been tainted.

Did this work before? Yes unknown.

Does this work in other browsers? Yes

Chrome version:  64.0.3245.0 (Official Build) canary (64-bit)  Channel: n/a
OS Version: OS X 10.12
Flash Version: 

I don't know how to use bisect, but it didn't work in stable 61.0.3163.100 and I'm not entirely sure this is a regression actually...
 
SVGfitlerBug.html
509 bytes View Download

Comment 1 by f...@opera.com, Oct 21 2017

Labels: OS-Android OS-Linux OS-Windows
Status: Available (was: Unconfirmed)
We were very conservative with the tainting when 'url(#foo)' support was added, so it's not very surprising, and thus most likely not a regression.

Comment 2 by junov@chromium.org, Oct 25 2017

Components: -Blink>Canvas Blink>SVG
Moving to SVG component since the code for determining whether an SVG source image is cross-origin (non-CORS) lives in the SVG parts of the source code.
Blockedon: 792518

Sign in to add a comment