{"action":"created","comment":{"url":"https://api.github.com/repos/whatwg/html/pulls/comments/47939854","id":47939854,"diff_hunk":"@@ -67797,22 +67795,30 @@ function AddCloud(data, x, y) { ... }</pre>\n   access information (e.g. read pixels) from images from another origin (one that isn't the <span\n   data-x=\"same origin\">same</span>).</p>\n \n-  <p>To mitigate this, bitmaps used with <code>canvas</code> elements are defined to have a flag\n-  indicating whether they are <span data-x=\"concept-canvas-origin-clean\">origin-clean</span>. All\n-  bitmaps start with their <span data-x=\"concept-canvas-origin-clean\">origin-clean</span> set to\n-  true. The flag is set to false when cross-origin images or fonts are used.</p>\n+  <p>To mitigate this, bitmaps used with <code>canvas</code> elements and <code>ImageBitmap</code>\n+  objects are defined to have a flag indicating whether they are <span\n+  data-x=\"concept-canvas-origin-clean\">origin-clean</span>. All bitmaps start with their <span\n+  data-x=\"concept-canvas-origin-clean\">origin-clean</span> set to true. The flag is set to\n+  false when cross-origin images or fonts are used.</p>\n \n   <p>The <code data-x=\"dom-canvas-toDataURL\">toDataURL()</code>, <code\n   data-x=\"dom-canvas-toBlob\">toBlob()</code>, and <code\n   data-x=\"dom-context-2d-getImageData\">getImageData()</code> methods check the flag and will\n   throw a <code>SecurityError</code> exception rather than leak cross-origin data.</p>\n \n+  <p>The value of the <span data-x=\"concept-canvas-origin-clean\">origin-clean</span> flag is\n+  propagated from a source <code>canvas</code> element's bitmap to a new <code>ImageBitmap</code>\n+  object by <code data-x=\"dom-createImageBitmap\">createImageBitmap()</code>. Conversely, a\n+  destination <code>canvas</code> element's bitmap will have its <span\n+  data-x=\"concept-canvas-origin-clean\">origin-clean</span> flags set to false by drawImage if","path":"source","position":50,"original_position":50,"commit_id":"de87d05c8fad87bb35dd4b2884658c21d12e73e5","original_commit_id":"de87d05c8fad87bb35dd4b2884658c21d12e73e5","user":{"login":"annevk","id":1544111,"avatar_url":"https://avatars.githubusercontent.com/u/1544111?v=3","gravatar_id":"","url":"https://api.github.com/users/annevk","html_url":"https://github.com/annevk","followers_url":"https://api.github.com/users/annevk/followers","following_url":"https://api.github.com/users/annevk/following{/other_user}","gists_url":"https://api.github.com/users/annevk/gists{/gist_id}","starred_url":"https://api.github.com/users/annevk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/annevk/subscriptions","organizations_url":"https://api.github.com/users/annevk/orgs","repos_url":"https://api.github.com/users/annevk/repos","events_url":"https://api.github.com/users/annevk/events{/privacy}","received_events_url":"https://api.github.com/users/annevk/received_events","type":"User","site_admin":false},"body":"drawImage needs `<code>` and xref.","created_at":"2015-12-17T18:13:25Z","updated_at":"2015-12-17T18:13:25Z","html_url":"https://github.com/whatwg/html/pull/385#discussion_r47939854","pull_request_url":"https://api.github.com/repos/whatwg/html/pulls/385","_links":{"self":{"href":"https://api.github.com/repos/whatwg/html/pulls/comments/47939854"},"html":{"href":"https://github.com/whatwg/html/pull/385#discussion_r47939854"},"pull_request":{"href":"https://api.github.com/repos/whatwg/html/pulls/385"}}},"pull_request":{"url":"https://api.github.com/repos/whatwg/html/pulls/385","id":52692305,"html_url":"https://github.com/whatwg/html/pull/385","diff_url":"https://github.com/whatwg/html/pull/385.diff","patch_url":"https://github.com/whatwg/html/pull/385.patch","issue_url":"https://api.github.com/repos/whatwg/html/issues/385","number":385,"state":"open","locked":false,"title":"Change ImageBitmap content security policy to use 'origin-clean' ","user":{"login":"junov","id":2607864,"avatar_url":"https://avatars.githubusercontent.com/u/2607864?v=3","gravatar_id":"","url":"https://api.github.com/users/junov","html_url":"https://github.com/junov","followers_url":"https://api.github.com/users/junov/followers","following_url":"https://api.github.com/users/junov/following{/other_user}","gists_url":"https://api.github.com/users/junov/gists{/gist_id}","starred_url":"https://api.github.com/users/junov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junov/subscriptions","organizations_url":"https://api.github.com/users/junov/orgs","repos_url":"https://api.github.com/users/junov/repos","events_url":"https://api.github.com/users/junov/events{/privacy}","received_events_url":"https://api.github.com/users/junov/received_events","type":"User","site_admin":false},"body":"Currently, image bitmap creation fails when the source is from another origin\r\nor is tainted with cross-origin content. This is unnecessarily restrictive and\r\nhinders use cases envisaged in the OffscreenCanvas feature proposal.","created_at":"2015-12-04T16:45:34Z","updated_at":"2015-12-17T18:13:25Z","closed_at":null,"merged_at":null,"merge_commit_sha":"11f6f4946d9acc41d18fc7d61f252134cdcdcc87","assignee":{"login":"domenic","id":617481,"avatar_url":"https://avatars.githubusercontent.com/u/617481?v=3","gravatar_id":"","url":"https://api.github.com/users/domenic","html_url":"https://github.com/domenic","followers_url":"https://api.github.com/users/domenic/followers","following_url":"https://api.github.com/users/domenic/following{/other_user}","gists_url":"https://api.github.com/users/domenic/gists{/gist_id}","starred_url":"https://api.github.com/users/domenic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/domenic/subscriptions","organizations_url":"https://api.github.com/users/domenic/orgs","repos_url":"https://api.github.com/users/domenic/repos","events_url":"https://api.github.com/users/domenic/events{/privacy}","received_events_url":"https://api.github.com/users/domenic/received_events","type":"User","site_admin":false},"milestone":null,"commits_url":"https://api.github.com/repos/whatwg/html/pulls/385/commits","review_comments_url":"https://api.github.com/repos/whatwg/html/pulls/385/comments","review_comment_url":"https://api.github.com/repos/whatwg/html/pulls/comments{/number}","comments_url":"https://api.github.com/repos/whatwg/html/issues/385/comments","statuses_url":"https://api.github.com/repos/whatwg/html/statuses/de87d05c8fad87bb35dd4b2884658c21d12e73e5","head":{"label":"junov:master","ref":"master","sha":"de87d05c8fad87bb35dd4b2884658c21d12e73e5","user":{"login":"junov","id":2607864,"avatar_url":"https://avatars.githubusercontent.com/u/2607864?v=3","gravatar_id":"","url":"https://api.github.com/users/junov","html_url":"https://github.com/junov","followers_url":"https://api.github.com/users/junov/followers","following_url":"https://api.github.com/users/junov/following{/other_user}","gists_url":"https://api.github.com/users/junov/gists{/gist_id}","starred_url":"https://api.github.com/users/junov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junov/subscriptions","organizations_url":"https://api.github.com/users/junov/orgs","repos_url":"https://api.github.com/users/junov/repos","events_url":"https://api.github.com/users/junov/events{/privacy}","received_events_url":"https://api.github.com/users/junov/received_events","type":"User","site_admin":false},"repo":{"id":46513253,"name":"html","full_name":"junov/html","owner":{"login":"junov","id":2607864,"avatar_url":"https://avatars.githubusercontent.com/u/2607864?v=3","gravatar_id":"","url":"https://api.github.com/users/junov","html_url":"https://github.com/junov","followers_url":"https://api.github.com/users/junov/followers","following_url":"https://api.github.com/users/junov/following{/other_user}","gists_url":"https://api.github.com/users/junov/gists{/gist_id}","starred_url":"https://api.github.com/users/junov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/junov/subscriptions","organizations_url":"https://api.github.com/users/junov/orgs","repos_url":"https://api.github.com/users/junov/repos","events_url":"https://api.github.com/users/junov/events{/privacy}","received_events_url":"https://api.github.com/users/junov/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/junov/html","description":"HTML Standard","fork":true,"url":"https://api.github.com/repos/junov/html","forks_url":"https://api.github.com/repos/junov/html/forks","keys_url":"https://api.github.com/repos/junov/html/keys{/key_id}","collaborators_url":"https://api.github.com/repos/junov/html/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/junov/html/teams","hooks_url":"https://api.github.com/repos/junov/html/hooks","issue_events_url":"https://api.github.com/repos/junov/html/issues/events{/number}","events_url":"https://api.github.com/repos/junov/html/events","assignees_url":"https://api.github.com/repos/junov/html/assignees{/user}","branches_url":"https://api.github.com/repos/junov/html/branches{/branch}","tags_url":"https://api.github.com/repos/junov/html/tags","blobs_url":"https://api.github.com/repos/junov/html/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/junov/html/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/junov/html/git/refs{/sha}","trees_url":"https://api.github.com/repos/junov/html/git/trees{/sha}","statuses_url":"https://api.github.com/repos/junov/html/statuses/{sha}","languages_url":"https://api.github.com/repos/junov/html/languages","stargazers_url":"https://api.github.com/repos/junov/html/stargazers","contributors_url":"https://api.github.com/repos/junov/html/contributors","subscribers_url":"https://api.github.com/repos/junov/html/subscribers","subscription_url":"https://api.github.com/repos/junov/html/subscription","commits_url":"https://api.github.com/repos/junov/html/commits{/sha}","git_commits_url":"https://api.github.com/repos/junov/html/git/commits{/sha}","comments_url":"https://api.github.com/repos/junov/html/comments{/number}","issue_comment_url":"https://api.github.com/repos/junov/html/issues/comments{/number}","contents_url":"https://api.github.com/repos/junov/html/contents/{+path}","compare_url":"https://api.github.com/repos/junov/html/compare/{base}...{head}","merges_url":"https://api.github.com/repos/junov/html/merges","archive_url":"https://api.github.com/repos/junov/html/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/junov/html/downloads","issues_url":"https://api.github.com/repos/junov/html/issues{/number}","pulls_url":"https://api.github.com/repos/junov/html/pulls{/number}","milestones_url":"https://api.github.com/repos/junov/html/milestones{/number}","notifications_url":"https://api.github.com/repos/junov/html/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/junov/html/labels{/name}","releases_url":"https://api.github.com/repos/junov/html/releases{/id}","created_at":"2015-11-19T18:51:42Z","updated_at":"2015-11-19T18:55:18Z","pushed_at":"2015-12-17T17:48:30Z","git_url":"git://github.com/junov/html.git","ssh_url":"git@github.com:junov/html.git","clone_url":"https://github.com/junov/html.git","svn_url":"https://github.com/junov/html","homepage":"https://html.spec.whatwg.org/multipage/","size":103151,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"whatwg:master","ref":"master","sha":"f46df7929b0f3eafd1f111e656f5b038ee076fa5","user":{"login":"whatwg","id":2226336,"avatar_url":"https://avatars.githubusercontent.com/u/2226336?v=3","gravatar_id":"","url":"https://api.github.com/users/whatwg","html_url":"https://github.com/whatwg","followers_url":"https://api.github.com/users/whatwg/followers","following_url":"https://api.github.com/users/whatwg/following{/other_user}","gists_url":"https://api.github.com/users/whatwg/gists{/gist_id}","starred_url":"https://api.github.com/users/whatwg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whatwg/subscriptions","organizations_url":"https://api.github.com/users/whatwg/orgs","repos_url":"https://api.github.com/users/whatwg/repos","events_url":"https://api.github.com/users/whatwg/events{/privacy}","received_events_url":"https://api.github.com/users/whatwg/received_events","type":"Organization","site_admin":false},"repo":{"id":11969507,"name":"html","full_name":"whatwg/html","owner":{"login":"whatwg","id":2226336,"avatar_url":"https://avatars.githubusercontent.com/u/2226336?v=3","gravatar_id":"","url":"https://api.github.com/users/whatwg","html_url":"https://github.com/whatwg","followers_url":"https://api.github.com/users/whatwg/followers","following_url":"https://api.github.com/users/whatwg/following{/other_user}","gists_url":"https://api.github.com/users/whatwg/gists{/gist_id}","starred_url":"https://api.github.com/users/whatwg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whatwg/subscriptions","organizations_url":"https://api.github.com/users/whatwg/orgs","repos_url":"https://api.github.com/users/whatwg/repos","events_url":"https://api.github.com/users/whatwg/events{/privacy}","received_events_url":"https://api.github.com/users/whatwg/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/whatwg/html","description":"HTML Standard","fork":false,"url":"https://api.github.com/repos/whatwg/html","forks_url":"https://api.github.com/repos/whatwg/html/forks","keys_url":"https://api.github.com/repos/whatwg/html/keys{/key_id}","collaborators_url":"https://api.github.com/repos/whatwg/html/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/whatwg/html/teams","hooks_url":"https://api.github.com/repos/whatwg/html/hooks","issue_events_url":"https://api.github.com/repos/whatwg/html/issues/events{/number}","events_url":"https://api.github.com/repos/whatwg/html/events","assignees_url":"https://api.github.com/repos/whatwg/html/assignees{/user}","branches_url":"https://api.github.com/repos/whatwg/html/branches{/branch}","tags_url":"https://api.github.com/repos/whatwg/html/tags","blobs_url":"https://api.github.com/repos/whatwg/html/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/whatwg/html/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/whatwg/html/git/refs{/sha}","trees_url":"https://api.github.com/repos/whatwg/html/git/trees{/sha}","statuses_url":"https://api.github.com/repos/whatwg/html/statuses/{sha}","languages_url":"https://api.github.com/repos/whatwg/html/languages","stargazers_url":"https://api.github.com/repos/whatwg/html/stargazers","contributors_url":"https://api.github.com/repos/whatwg/html/contributors","subscribers_url":"https://api.github.com/repos/whatwg/html/subscribers","subscription_url":"https://api.github.com/repos/whatwg/html/subscription","commits_url":"https://api.github.com/repos/whatwg/html/commits{/sha}","git_commits_url":"https://api.github.com/repos/whatwg/html/git/commits{/sha}","comments_url":"https://api.github.com/repos/whatwg/html/comments{/number}","issue_comment_url":"https://api.github.com/repos/whatwg/html/issues/comments{/number}","contents_url":"https://api.github.com/repos/whatwg/html/contents/{+path}","compare_url":"https://api.github.com/repos/whatwg/html/compare/{base}...{head}","merges_url":"https://api.github.com/repos/whatwg/html/merges","archive_url":"https://api.github.com/repos/whatwg/html/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/whatwg/html/downloads","issues_url":"https://api.github.com/repos/whatwg/html/issues{/number}","pulls_url":"https://api.github.com/repos/whatwg/html/pulls{/number}","milestones_url":"https://api.github.com/repos/whatwg/html/milestones{/number}","notifications_url":"https://api.github.com/repos/whatwg/html/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/whatwg/html/labels{/name}","releases_url":"https://api.github.com/repos/whatwg/html/releases{/id}","created_at":"2013-08-08T06:26:07Z","updated_at":"2015-12-17T03:35:57Z","pushed_at":"2015-12-17T17:48:31Z","git_url":"git://github.com/whatwg/html.git","ssh_url":"git@github.com:whatwg/html.git","clone_url":"https://github.com/whatwg/html.git","svn_url":"https://github.com/whatwg/html","homepage":"https://html.spec.whatwg.org/multipage/","size":116110,"stargazers_count":291,"watchers_count":291,"language":"HTML","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":61,"mirror_url":null,"open_issues_count":125,"forks":61,"open_issues":125,"watchers":291,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/whatwg/html/pulls/385"},"html":{"href":"https://github.com/whatwg/html/pull/385"},"issue":{"href":"https://api.github.com/repos/whatwg/html/issues/385"},"comments":{"href":"https://api.github.com/repos/whatwg/html/issues/385/comments"},"review_comments":{"href":"https://api.github.com/repos/whatwg/html/pulls/385/comments"},"review_comment":{"href":"https://api.github.com/repos/whatwg/html/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/whatwg/html/pulls/385/commits"},"statuses":{"href":"https://api.github.com/repos/whatwg/html/statuses/de87d05c8fad87bb35dd4b2884658c21d12e73e5"}}}}