--- In [email protected], "jamesd" <jcdeering1@...> wrote: > > SVG-as-an-image shouldn't be able to load external resources (which might > come from other domains) > > Emphasis on might. What about local access? It too must be denied? Seems to > be throwing the baby out with the bathwater. I just checked, there is not a > terrorist hiding under every bed. >
It's all there in the link. No local access becasue of https://bugzilla.mozilla.org/show_bug.cgi?id=628747#c3 The under the bed argument is spurious. There's no reason to hide under the bed if doing so doesn't allow you to do bad things. Robert. ------------------------------------ ----- To unsubscribe send a message to: [email protected] -or- visit http://groups.yahoo.com/group/svg-developers and click "edit my membership" ----Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/svg-developers/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/svg-developers/join (Yahoo! ID required) <*> To change settings via email: [email protected] [email protected] <*> To unsubscribe from this group, send an email to: [email protected] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
