Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 81d69724b4b62e74af261ba14614f097e97c34cd
https://github.com/WebKit/WebKit/commit/81d69724b4b62e74af261ba14614f097e97c34cd
Author: Owen Morgan <[email protected]>
Date: 2026-06-05 (Fri, 05 Jun 2026)
Changed paths:
A LayoutTests/http/tests/media/canvas-webm-allowed-anonymous-expected.txt
A
LayoutTests/http/tests/media/canvas-webm-allowed-anonymous-redirect-expected.txt
A LayoutTests/http/tests/media/canvas-webm-allowed-anonymous-redirect.html
A LayoutTests/http/tests/media/canvas-webm-allowed-anonymous.html
A
LayoutTests/http/tests/media/canvas-webm-allowed-no-crossorigin-expected.txt
A LayoutTests/http/tests/media/canvas-webm-allowed-no-crossorigin.html
A
LayoutTests/http/tests/media/canvas-webm-tainted-no-crossorigin-expected.txt
A LayoutTests/http/tests/media/canvas-webm-tainted-no-crossorigin.html
A LayoutTests/http/tests/media/canvas-webm-tainted-redirect-expected.txt
A
LayoutTests/http/tests/media/canvas-webm-tainted-redirect-via-cross-origin-expected.txt
A
LayoutTests/http/tests/media/canvas-webm-tainted-redirect-via-cross-origin.html
A LayoutTests/http/tests/media/canvas-webm-tainted-redirect.html
M LayoutTests/http/tests/media/resources/.htaccess
A LayoutTests/http/tests/media/resources/serve_video_cors.py
M Source/WebCore/platform/graphics/WebMResourceClient.cpp
M Source/WebCore/platform/graphics/WebMResourceClient.h
M Source/WebCore/platform/graphics/cocoa/MediaPlayerPrivateWebM.h
M Source/WebCore/platform/graphics/cocoa/MediaPlayerPrivateWebM.mm
Log Message:
-----------
[WebM player] Implement CORS checking
https://bugs.webkit.org/show_bug.cgi?id=242869
https://bugs.webkit.org/show_bug.cgi?id=307812
Reviewed by Youenn Fablet.
Currently the WebM player does not handle CORS correctly and fails to
load. This is particularly problematic when serving WebM media from
a CDN, and causes us lots of issues at https://veed.io as we try to
send the video data into a WebGL2 texture.
This patch updates PR #2521 and brings cross origin checking to
the WebM player.
LayoutTests/http/tests/media/canvas-webm-allowed-anonymous-redirect.html: Added.
LayoutTests/http/tests/media/canvas-webm-allowed-anonymous.html: Added.
LayoutTests/http/tests/media/canvas-webm-allowed-no-crossorigin.html: Added.
LayoutTests/http/tests/media/canvas-webm-tainted-no-crossorigin.html: Added.
LayoutTests/http/tests/media/canvas-webm-tainted-redirect.html: Added.
LayoutTests/http/tests/media/canvas-webm-tainted-redirect-via-cross-origin.html:
Added.
* Source/WebCore/platform/graphics/WebMResourceClient.cpp
(WebMResourceClient::redirectReceived)
(WebMResourceClient::responseReceived)
* Source/WebCore/platform/graphics/WebMResourceClient.h
* Source/WebCore/platform/graphics/cocoa/MediaPlayerPrivateWebM.h
* Source/WebCore/platform/graphics/cocoa/MediaPlayerPrivateWebM.mm
(MediaPlayerPrivateWebM::isCrossOrigin)
(MediaPlayerPrivateWebM::responseReceived)
(MediaPlayerPrivateWebM::redirectReceived)
(MediaPlayerPrivateWebM::didPassCORSAccessCheck)
Canonical link: https://commits.webkit.org/314633@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
