[whatwg] Support for <link rel="stylesheet" crossorigin>
Tab Atkins Jr.
jackalmage at gmail.com
Tue Aug 28 11:09:07 PDT 2012
On Tue, Aug 28, 2012 at 11:04 AM, Boris Zbarsky <bzbarsky at mit.edu> wrote:
> I just added support for <link rel="stylesheet" crossorigin> in Gecko.
> Such links are subject to CORS checks if the load is cross-site, and the
> sheet load will fail if the CORS check fails. If the CORS check succeeds,
> script in the page will be able to script the cross-site stylesheet.
> This allows stylesheets served from a CDN to be scripted by the page if
> desired, so I would like to propose that we add this feature to the spec.
> An open issue: what to do about @import? I haven't done anything magic here
> yet. Inheriting the CORS mode from the importing sheet is a bit weird, and
> I wasn't quite sure I wanted to make CSS syntax changes at this time.
>  https://bugzilla.mozilla.org/show_bug.cgi?id=732209
I think I'm of the opinion that @import should, in general, act the
same as if the stylesheet was inlined. So, I support forwarding the
CORS mode to the imported sheets.
(On the other hand, this doesn't allow @import in <style> to be crossorigin.)
More information about the whatwg