On Wed, Aug 22, 2012 at 09:28:20PM -0000, jamesd wrote:
                        .
                        .
                        .
> SVG-as-an-image shouldn't be able to load external resources (which might 
> come from other domains)
> 
> Emphasis on might. What about local access? It too must be denied? Seems to 
> be throwing the baby out with the bathwater. I just checked, there is not a 
> terrorist hiding under every bed.
                        .
                        .
                        .
Me, too; that is, I'd like to be a little more precise
about what we're saying in this thread.  There's no 
standard, correct, that invalidates SVG-within-SVG?  I
welcome the report that the Firefoxers determined this
is a security risk, and blocked it, but I also agree
that the local-resource question deserves more investi-
gation.


------------------------------------

-----
To unsubscribe send a message to: [email protected]
-or-
visit http://groups.yahoo.com/group/svg-developers and click "edit my 
membership"
----Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/svg-developers/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/svg-developers/join
    (Yahoo! ID required)

<*> To change settings via email:
    [email protected] 
    [email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/

Reply via email to