Open Bug 1599950 Opened 5 years ago Updated 2 years ago

Tainted "no-cors" <audio>/<video> should be treated as cross-origin

Categories

(Core :: Audio/Video: Playback, enhancement, P3)

Product:
Core
Component:
Audio/Video: Playback
Type:
enhancement

Tracking

()

People

(Reporter: karlt, Unassigned)

References

(Blocks 1 open bug)

Details

Since https://github.com/whatwg/fetch/pull/834 was merged, redirect tainted "no-cors" fetches should be treated as cross-origin.

HTMLMediaElement currently assumes that A -> B -> A resources are same-origin.

Blocks: 1599954

This is tested in webaudio/the-audio-api/the-mediaelementaudiosourcenode-interface/no-cors.https.html, but that will be disabled soon due to bug 1599954.

When this bug is fixed, results will be stable, and so the test can be re-enabled.

Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.