Re: [blink-dev] Intent to Ship: SVG foreignObject does not taint the canvas for blob URLs

2024-09-18 Thread Domenic Denicola
Seems like a good idea! On Thu, Sep 19, 2024 at 4:55 AM Chromestatus < ad...@cr-status.appspotmail.com> wrote: > Contact emails schen...@chromium.org > > Explainer None > > Specification > https://html.spec.whatwg.org/multipage/canvas.html#security-with-canvas-elements I spent some time looking

[blink-dev] Intent to Extend Experiment 2: Capture all screens

2024-09-18 Thread 'Simon Hangl' via blink-dev
Contact emails simo...@google.com, swethasiva...@google.com Explainer https://github.com/screen-share/capture-all-screens/blob/main/README.md Specification https://screen-share.github.io/capture-all-screens Design docs https://screen-share.github.io/capture-all-screens https://github.com/sc

[blink-dev] Re: Intent to Ship: noopener-allow-popups COOP value

2024-09-18 Thread Alex Russell
LGTM1. Excited to see this happening. On Monday, September 16, 2024 at 12:23:09 AM UTC-7 Yoav Weiss wrote: > Contact emailsyoavwe...@chromium.org > > Explainer > https://gist.github.com/yoavweiss/c7b61e97e6f8d207be619f87ab96ead5 > > Specificationhttps://github.com/whatwg/html/pull/10394 > > The P

Re: [blink-dev] Re: Intent to Ship: noopener-allow-popups COOP value

2024-09-18 Thread Chris Harrelson
LGTM2 On Wed, Sep 18, 2024 at 8:44 AM Alex Russell wrote: > LGTM1. Excited to see this happening. > > On Monday, September 16, 2024 at 12:23:09 AM UTC-7 Yoav Weiss wrote: > >> Contact emailsyoavwe...@chromium.org >> >> Explainer >> https://gist.github.com/yoavweiss/c7b61e97e6f8d207be619f87ab96ea

Re: [blink-dev] Re: Intent to Ship: noopener-allow-popups COOP value

2024-09-18 Thread Daniel Bratell
LGTM3 (Would be nice to have the PR landed, but it does look like it's just a post-vacation delay rather than any concerns so I will assume that it's landing Real Soon Now) /Daniel On 2024-09-18 17:44, Chris Harrelson wrote: LGTM2 On Wed, Sep 18, 2024 at 8:44 AM Alex Russell wrote:

Re: [blink-dev] Intent to Ship: Attribution Reporting Feature: Debug Key Privacy Improvement

2024-09-18 Thread Yoav Weiss (@Shopify)
LGTM3 On Thursday, September 12, 2024 at 7:41:22 PM UTC+2 Chris Harrelson wrote: > LGTM2 > > On Thu, Sep 12, 2024 at 9:58 AM Mike Taylor > wrote: > >> LGTM1 - this seems like an important privacy bugfix. Compatibility-wise, >> this won't affect user experience (if my mental model is correct),

[blink-dev] Intent to Ship: SVG foreignObject does not taint the canvas for blob URLs

2024-09-18 Thread Chromestatus
Contact emails schen...@chromium.org Explainer None Specification https://html.spec.whatwg.org/multipage/canvas.html#security-with-canvas-elements Summary The ability to use an element with an SVG source in a HTML canvas drawImage operation has long been supported by all browsers, but the