search

immersive-web / model-element

Repository for the <model> tag. Feature leads: Marcos Cáceres and Laszlo Gombos
https://immersive-web.github.io/model-element/
Other
62 stars 11 forks source link

Formats and CSP #15

Open marcoscaceres opened 1 year ago

marcoscaceres commented 1 year ago

Need to clarify that 3D resources can fetch resources, and as such need to be subject the document's CSP (probably "media-src"). However, we need to clarify what this means in relation to, say, "img-src", for example... as models can load png/jpg textures.

domenic commented 1 year ago

This issue seems to be about CSP, not CORS?

marcoscaceres commented 2 months ago

Ah whoops, yes. Acronym soups getting all mixed up in my head. Fixed the title and OP.

domenic commented 2 months ago

However, we need to clarify what this means in relation to, say, "img-src", for example... as models can load png/jpg textures.

I don't know the answer myself, but I guess we can look at the precedents from CSS and SVG.

cabanier commented 2 months ago

Ah whoops, yes. Acronym soups getting all mixed up in my head. Fixed the title and OP.

Browser generally frown upon subresource fetches. The model element should fetch only 1 file and not reach out later for additional ones. SVG-as-a-image was changed to no longer allow fetches.