html5不安全,html5 – context.getImageData()操作不安全

The element’s 2D context’s drawImage() method is called with an HTMLImageElement or an HTMLVideoElement whose origin is not the same

as that of the Document object that owns the canvas element.

The element’s 2D context’s drawImage() method is called with an HTMLCanvasElement whose origin-clean flag is false.

The element’s 2D context’s fillStyle attribute is set to a CanvasPattern object that was created from an HTMLImageElement or an

HTMLVideoElement whose origin was not the same as that of the Document

object that owns the canvas element when the pattern was created.

The element’s 2D context’s fillStyle attribute is set to a CanvasPattern object that was created from an HTMLCanvasElement whose

origin-clean flag was false when the pattern was created.

The element’s 2D context’s strokeStyle attribute is set to a CanvasPattern object that was created from an HTMLImageElement or an

HTMLVideoElement whose origin was not the same as that of the Document

object that owns the canvas element when the pattern was created.

The element’s 2D context’s strokeStyle attribute is set to a CanvasPattern object that was created from an HTMLCanvasElement whose

origin-clean flag was false when the pattern was created.

The element’s 2D context’s fillText() or strokeText() methods are invoked and end up using a font that has an origin that is not the

same as that of the Document object that owns the canvas element.