<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://www.w3.org/Bugs/Public/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4"
          urlbase="https://www.w3.org/Bugs/Public/"
          
          maintainer="sysbot+bugzilla@w3.org"
>

    <bug>
          <bug_id>13312</bug_id>
          
          <creation_ts>2011-07-20 17:49:57 +0000</creation_ts>
          <short_desc>After doing a bunch of reading, it appears to me that the crossorigin attribute was added to help WebGL on canvas.  As far as I can tell, it is irrelevant when the img element is used in HTML (i.e., &lt;img src=&quot;myPic.jpg&quot;&gt;.  If I am wrong, then could you pl</short_desc>
          <delta_ts>2011-08-10 22:06:09 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>HTML WG</product>
          <component>LC1 HTML5 spec</component>
          <version>unspecified</version>
          <rep_platform>Other</rep_platform>
          <op_sys>other</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc>http://www.whatwg.org/specs/web-apps/current-work/#attr-img-crossorigin</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>contributor</reporter>
          <assigned_to name="Ian &apos;Hixie&apos; Hickson">ian</assigned_to>
          <cc>bzbarsky</cc>
    
    <cc>ian</cc>
    
    <cc>jonas</cc>
    
    <cc>mike</cc>
    
    <cc>public-html-admin</cc>
    
    <cc>public-html-wg-issue-tracking</cc>
          
          <qa_contact name="HTML WG Bugzilla archive list">public-html-bugzilla</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>51332</commentid>
    <comment_count>0</comment_count>
    <who name="">contributor</who>
    <bug_when>2011-07-20 17:49:57 +0000</bug_when>
    <thetext>Specification: http://www.whatwg.org/specs/web-apps/current-work/multipage/embedded-content-1.html
Multipage: http://www.whatwg.org/C#attr-img-crossorigin
Complete: http://www.whatwg.org/c#attr-img-crossorigin

Comment:
After doing a bunch of reading, it appears to me that the crossorigin
attribute was added to help WebGL on canvas.  As far as I can tell, it is
irrelevant when the img element is used in HTML (i.e., &lt;img src=&quot;myPic.jpg&quot;&gt;. 
If I am wrong, then could you please clarify how crossorigin is used in HTML? 
If I am right, then could you please clarify that this attribute is only
useful when using the canvas element.  If both of these are wrong, then plz
correctly my erroneous thinking.  :-)  Thank you.

Posted from: 129.83.31.3
User agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>51334</commentid>
    <comment_count>1</comment_count>
    <who name="Boris Zbarsky">bzbarsky</who>
    <bug_when>2011-07-20 18:15:44 +0000</bug_when>
    <thetext>The crossorigin attribute is useful any time you&apos;re planning to try to extract the pixel data from the image, whether you do it via canvas or via some other mechanism.  At the moment there are no such other mechanisms, but that might change.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>51340</commentid>
    <comment_count>2</comment_count>
    <who name="Jonas Sicking (Not reading bugmail)">jonas</who>
    <bug_when>2011-07-21 01:11:43 +0000</bug_when>
    <thetext>In particular, the 2D canvas spec should be changed to not taint if the data was loaded using CORS (i.e. if the crossorigin attribute was set when the data was loaded).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>52608</commentid>
    <comment_count>3</comment_count>
    <who name="Michael[tm] Smith">mike</who>
    <bug_when>2011-08-04 05:03:03 +0000</bug_when>
    <thetext>mass-moved component to LC1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>54637</commentid>
    <comment_count>4</comment_count>
    <who name="Ian &apos;Hixie&apos; Hickson">ian</who>
    <bug_when>2011-08-10 22:05:53 +0000</bug_when>
    <thetext>2D canvas is already fixed to work with this — the images are defined to be same-origin if you got it via CORS, and canvas does a simple origin check.

I&apos;ve added a slight amount of explanatory material for &lt;img crossorigin&gt;. I&apos;ll probably add more in due course once we&apos;ve got more experience with it.


EDITOR&apos;S RESPONSE: This is an Editor&apos;s Response to your comment. If you are satisfied with this response, please change the state of this bug to CLOSED. If you have additional information and would like the editor to reconsider, please reopen this bug. If you would like to escalate the issue to the full HTML Working Group, please add the TrackerRequest keyword to this bug, and suggest title and text for the tracker issue; or you may create a tracker issue yourself, if you are able to do so. For more details, see this document:
   http://dev.w3.org/html5/decision-policy/decision-policy.html

Status: Accepted
Change Description: see diff given below
Rationale: Concurred with reporter&apos;s comments.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>54638</commentid>
    <comment_count>5</comment_count>
    <who name="">contributor</who>
    <bug_when>2011-08-10 22:06:09 +0000</bug_when>
    <thetext>Checked in as WHATWG revision r6410.
Check-in comment: exposition
http://html5.org/tools/web-apps-tracker?from=6409&amp;to=6410</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>