3 ms·
Their solution to "Layout-Based Attacks" is trivial to get around, any visual style change can be detected, even if it doesn't trigger reflow -- the <canvas> AP
by blasdel 17y ago
Their solution to "Layout-Based Attacks" is trivial to get around, any visual style change can be detected, even if it doesn't trigger reflow -- the <canvas> API has pixel accessors.
- kinetik 17y agoThat's incorrect. Web content needs additional privileges to paint web content into a canvas for exactly this reason.