21944 2013-05-06 21:30:01 +0000 Security on measureText is unneccessary 2015-07-10 14:38:22 +0000 1 1 1 Unclassified HTML WG CR HTML Canvas 2D Context unspecified PC Windows NT NEW http://www.w3.org/TR/2dcontext/#dom-context-2d-measuretext P2 normal --- 21943 1 cabanier dave.null ian mike plh public-html-admin public-html-wg-issue-tracking wseltzer+bugzilla public-html-bugzilla oldest_to_newest 87287 0 cabanier 2013-05-06 21:30:01 +0000 +++ This bug was initially created as a clone of Bug #21943 +++ The canvas 2d spec currently states that a font has to be local in order for measureText to work: If doing these measurements requires using a font that has an origin that is not the same as that of the Document object that owns the canvas element (even if "using a font" means just checking if that font has a particular glyph in it before falling back to another font), then the method must throw a SecurityError exception. http://www.whatwg.org/specs/web-apps/current-work/multipage/the-canvas-element.html#dom-context-2d-measuretext http://www.w3.org/TR/2dcontext/#dom-context-2d-measuretext After a small discussion on the mailing list, we agreed that the spec should not have this text. Instead it should be silent and rely on the general font loading algorithm that CSS specifies. 88307 1 ian 2013-05-28 22:05:37 +0000 It definitely shouldn't be silent, but if the font loading infrastructure elsewhere in the platform defines this better, then yeah, we should just have a non-normative note here instead. In any case, it should be the same text as we use elsewhere in the HTML spec for using fonts. Where is font loading defined? (i.e. what can we rely on to make this just work?) 88312 2 cabanier 2013-05-28 22:15:56 +0000 > Where is font loading defined? (i.e. what can we rely on to make this just > work?) I'm unsure. From the discussion, it sounds like Anne is going to define this. http://dev.w3.org/csswg/css-fonts/#same-origin-restriction was also mentioned but I'm unclear if that will be the official definition. 121945 3 plh 2015-07-10 14:38:22 +0000 https://lists.w3.org/Archives/Public/public-canvas-api/2013AprJun/0000.html