This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 6476 - cross-origin media element loads and progress events
Summary: cross-origin media element loads and progress events
Alias: None
Product: HTML WG
Classification: Unclassified
Component: pre-LC1 HTML5 spec (editor: Ian Hickson) (show other bugs)
Version: unspecified
Hardware: All All
: P2 normal
Target Milestone: ---
Assignee: Ian 'Hixie' Hickson
QA Contact: HTML WG Bugzilla archive list
Keywords: NoReply
Depends on:
Reported: 2009-01-27 14:23 UTC by Anne
Modified: 2010-10-04 14:55 UTC (History)
3 users (show)

See Also:


Description Anne 2009-01-27 14:23:20 UTC
Media elements currently allow for cross-origin loads without explicit opt in from the server they are requested from. So far this is similar to the img element and ok. However, progress events are not limited in any way exposing more information about the file on the other end than has been possible so far with cross-origin loads. That information needs to be restricted somehow. Most likely by using CORS as defense mechanism.
Comment 1 Ian 'Hixie' Hickson 2009-02-02 11:05:40 UTC
(this is pending on progress events feedback)
Comment 2 Maciej Stachowiak 2010-03-14 13:16:30 UTC
This bug predates the HTML Working Group Decision Policy.

If you are satisfied with the resolution of this bug, please change the state of this bug to CLOSED. If
you have additional information and would like the editor to reconsider, please reopen this bug. If you would like to escalate the issue to the full HTML Working Group, please add the TrackerRequest keyword to this bug, and suggest title and text for the tracker issue; or you may create a tracker issue yourself, if you are able to do so. For more details, see this document:

This bug is now being moved to VERIFIED. Please respond within two weeks. If this bug is not closed, reopened or escalated within two weeks, it may be marked as NoReply and will no longer be considered a pending comment.