{"action":"created","issue":{"url":"https://api.github.com/repos/flowplayer/flowplayer/issues/826","labels_url":"https://api.github.com/repos/flowplayer/flowplayer/issues/826/labels{/name}","comments_url":"https://api.github.com/repos/flowplayer/flowplayer/issues/826/comments","events_url":"https://api.github.com/repos/flowplayer/flowplayer/issues/826/events","html_url":"https://github.com/flowplayer/flowplayer/issues/826","id":83452607,"number":826,"title":"subtitle CORS: Chrome error w/o consequence","user":{"login":"blacktrash","id":168338,"avatar_url":"https://avatars.githubusercontent.com/u/168338?v=3","gravatar_id":"","url":"https://api.github.com/users/blacktrash","html_url":"https://github.com/blacktrash","followers_url":"https://api.github.com/users/blacktrash/followers","following_url":"https://api.github.com/users/blacktrash/following{/other_user}","gists_url":"https://api.github.com/users/blacktrash/gists{/gist_id}","starred_url":"https://api.github.com/users/blacktrash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blacktrash/subscriptions","organizations_url":"https://api.github.com/users/blacktrash/orgs","repos_url":"https://api.github.com/users/blacktrash/repos","events_url":"https://api.github.com/users/blacktrash/events{/privacy}","received_events_url":"https://api.github.com/users/blacktrash/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/flowplayer/flowplayer/labels/doc","name":"doc","color":"444444"}],"state":"open","locked":false,"assignee":{"login":"blacktrash","id":168338,"avatar_url":"https://avatars.githubusercontent.com/u/168338?v=3","gravatar_id":"","url":"https://api.github.com/users/blacktrash","html_url":"https://github.com/blacktrash","followers_url":"https://api.github.com/users/blacktrash/followers","following_url":"https://api.github.com/users/blacktrash/following{/other_user}","gists_url":"https://api.github.com/users/blacktrash/gists{/gist_id}","starred_url":"https://api.github.com/users/blacktrash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blacktrash/subscriptions","organizations_url":"https://api.github.com/users/blacktrash/orgs","repos_url":"https://api.github.com/users/blacktrash/repos","events_url":"https://api.github.com/users/blacktrash/events{/privacy}","received_events_url":"https://api.github.com/users/blacktrash/received_events","type":"User","site_admin":false},"milestone":null,"comments":9,"created_at":"2015-06-01T11:43:28Z","updated_at":"2015-06-03T07:44:42Z","closed_at":null,"body":"At http://demos.flowplayer.org/basics/subtitle.html#vtt Chrome complains with an error:\r\n\"Text track from origin 'http://d12zt1n3pd4xhr.cloudfront.net' has been blocked from loading: Not at same origin as the document, and parent of track element does not have a 'crossorigin' attribute. Origin 'http://demos.flowplayer.org' is therefore not allowed access.\"\r\nAnd then goes on to load the track anyway ...?\r\n\r\nThis might be a Chrome bug, so I'm gonna postpone fiddling with the CORS settings until I understand why they are wrong. @nnarhinen - any explanations?"},"comment":{"url":"https://api.github.com/repos/flowplayer/flowplayer/issues/comments/108233852","html_url":"https://github.com/flowplayer/flowplayer/issues/826#issuecomment-108233852","issue_url":"https://api.github.com/repos/flowplayer/flowplayer/issues/826","id":108233852,"user":{"login":"nnarhinen","id":265438,"avatar_url":"https://avatars.githubusercontent.com/u/265438?v=3","gravatar_id":"","url":"https://api.github.com/users/nnarhinen","html_url":"https://github.com/nnarhinen","followers_url":"https://api.github.com/users/nnarhinen/followers","following_url":"https://api.github.com/users/nnarhinen/following{/other_user}","gists_url":"https://api.github.com/users/nnarhinen/gists{/gist_id}","starred_url":"https://api.github.com/users/nnarhinen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nnarhinen/subscriptions","organizations_url":"https://api.github.com/users/nnarhinen/orgs","repos_url":"https://api.github.com/users/nnarhinen/repos","events_url":"https://api.github.com/users/nnarhinen/events{/privacy}","received_events_url":"https://api.github.com/users/nnarhinen/received_events","type":"User","site_admin":false},"created_at":"2015-06-03T07:44:42Z","updated_at":"2015-06-03T07:44:42Z","body":"from MDN\r\n\r\n> crossorigin\r\nThis enumerated attribute indicates if the fetching of the related image must be done using CORS or not. CORS-enabled resources can be reused in the <canvas> element without being tainted. The allowed values are:\r\nanonymous\r\nA cross-origin request (i.e. with Origin: HTTP header) is performed. But no credential is sent (i.e. no cookie, no X.509 certificate and no HTTP Basic authentication is sent). If the server does not give credentials to the origin site (by not setting the Access-Control-Allow-Origin: HTTP header), the image will be tainted and its usage restricted..\r\nuse-credentials\r\nA cross-origin request (i.e. with Origin: HTTP header) is performed with credential is sent (i.e. a cookie, a certificate and HTTP Basic authentication is performed). If the server does not give credentials to the origin site (through Access-Control-Allow-Credentials: HTTP header), the image will be tainted and its usage restricted.\r\nWhen not present, the resource is fetched without a CORS request (i.e. without sending the Origin: HTTP header), preventing its non-tainted used in <canvas> elements. If invalid, it is handled as if the enumerated keyword anonymous was used. See CORS settings attributes for additional information."}}