<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>108755</bug_id>
          
          <creation_ts>2013-02-02 12:38:26 -0800</creation_ts>
          <short_desc>Security DOM Exception with toDataURL of canvas drawn from SVG</short_desc>
          <delta_ts>2013-08-16 19:53:16 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Canvas</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>119492</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>0</everconfirmed>
          <reporter name="Jonathan Deutsch">jonathan</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>abarth</cc>
    
    <cc>kbr</cc>
    
    <cc>krit</cc>
    
    <cc>pdr</cc>
    
    <cc>zimmermann</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>823688</commentid>
    <comment_count>0</comment_count>
      <attachid>186234</attachid>
    <who name="Jonathan Deutsch">jonathan</who>
    <bug_when>2013-02-02 12:38:26 -0800</bug_when>
    <thetext>Created attachment 186234
repro case

1. Open attached svgtest.html from SVGtoDataURLBug.zip
-or-
1. In JavaScript, Create a canvas element
2. use drawImage to draw a new Image() from an SVG source
3. call toDataURL() on the canvas

I would expect to get a data URL with png contents of the image.

Safari instead reports:
SECURITY_ERR: DOM Exception 18: An attempt was made to break through the security policy of the user agent.

This affects Tumult Hype: http://tumult.com/hype/</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>823689</commentid>
    <comment_count>1</comment_count>
    <who name="Jonathan Deutsch">jonathan</who>
    <bug_when>2013-02-02 12:38:58 -0800</bug_when>
    <thetext>http://code.google.com/p/chromium/issues/detail?id=173868</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>824506</commentid>
    <comment_count>2</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2013-02-04 10:18:30 -0800</bug_when>
    <thetext>SVG images are complicated and we&apos;re not smart enough to determine whether it&apos;s safe to return the result to JavaScript.  We&apos;re conservative and always throw the exception.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>918179</commentid>
    <comment_count>3</comment_count>
    <who name="Philip Rogers">pdr</who>
    <bug_when>2013-08-16 19:53:16 -0700</bug_when>
    <thetext>Fixed

*** This bug has been marked as a duplicate of bug 119492 ***</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>186234</attachid>
            <date>2013-02-02 12:38:26 -0800</date>
            <delta_ts>2013-02-02 12:38:26 -0800</delta_ts>
            <desc>repro case</desc>
            <filename>SVGtoDataURLBug.zip</filename>
            <type>application/zip</type>
            <size>2906</size>
            <attacher name="Jonathan Deutsch">jonathan</attacher>
            
              <data encoding="base64">UEsDBBQACAAIAOm9M0AAAAAAAAAAAAAAAAAXABAARmlib25hY2NpX3NwaXJhbF8zNC5zdmdVWAwA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=
</data>

          </attachment>
      

    </bug>

</bugzilla>