Closed Bug 1806022 Opened 2 years ago Closed 2 years ago

mask images from chrome:// URIs cannot be loaded in content

Categories

(Core :: CSS Parsing and Computation, task)

task

Tracking

()

RESOLVED INVALID

People

(Reporter: mconley, Unassigned)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

It seems that chrome:// image URIs can be loaded in content. That's been pretty handy as we start using Storybook as a gallery of our reusable UI components for things like icons.

I've noticed, however, that mask images aren't loaded. Is that intentional? Presuming that exposing chrome:// images is okay, can we expose them for image masks as well?

See attachment.

Attachment #9308597 - Attachment mime type: text/plain → text/html

In the attached document, there should be a second image below the first little chevron here: I'd expect to see a little red arrow below the black one.

Bug 292789 seems relevant here.

This is intentional, mask-image has cross-origin restrictions: https://drafts.fxtf.org/css-masking-1/#sec

We could special-case chrome:// I guess, but it's unclear what the security implications of that is at a glance. If you really need it, please reopen and we can look into it, but we should probably loop in some of the security folks before doing so.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: