w3c / webcodecs

WebCodecs is a flexible web API for encoding and decoding audio and video.
https://w3c.github.io/webcodecs/
Other
988 stars 136 forks source link

Use 'is not origin-clean' within VideoFrame constructor #653

Closed youennf closed 1 month ago

youennf commented 1 year ago

VideoFrame constructor step 2 is checking origins which is neither very precise nor accurate. It would seem better to reuse https://html.spec.whatwg.org/multipage/canvas.html#the-image-argument-is-not-origin-clean instead.

dalecurtis commented 1 year ago

Seems reasonable. The intent is to not allow cross-origin sources to create VideoFrames since there is no tainting mechanism at present.

chrisn commented 1 month ago

It looks like this could be closed, having merged #655?