On Wed, Aug 22, 2012 at 09:28:20PM -0000, jamesd wrote:
.
.
.
> SVG-as-an-image shouldn't be able to load external resources (which might
> come from other domains)
>
> Emphasis on might. What about local access? It too must be denied? Seems to
> be throwing the baby out with the bathwater. I just checked, there is not a
> terrorist hiding under every bed.
.
.
.
Me, too; that is, I'd like to be a little more precise
about what we're saying in this thread. There's no
standard, correct, that invalidates SVG-within-SVG? I
welcome the report that the Firefoxers determined this
is a security risk, and blocked it, but I also agree
that the local-resource question deserves more investi-
gation.
------------------------------------
-----
To unsubscribe send a message to: [email protected]
-or-
visit http://groups.yahoo.com/group/svg-developers and click "edit my
membership"
----Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/svg-developers/
<*> Your email settings:
Individual Email | Traditional
<*> To change settings online go to:
http://groups.yahoo.com/group/svg-developers/join
(Yahoo! ID required)
<*> To change settings via email:
[email protected]
[email protected]
<*> To unsubscribe from this group, send an email to:
[email protected]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/