| Index: third_party/WebKit/Source/core/html/HTMLCanvasElement.cpp
|
| diff --git a/third_party/WebKit/Source/core/html/HTMLCanvasElement.cpp b/third_party/WebKit/Source/core/html/HTMLCanvasElement.cpp
|
| index 07a62ea5587f2ff592a812e4e0c7b9b6349a9656..11eb39f893780a61a2d318887a1b6bf8c3fbf8b7 100644
|
| --- a/third_party/WebKit/Source/core/html/HTMLCanvasElement.cpp
|
| +++ b/third_party/WebKit/Source/core/html/HTMLCanvasElement.cpp
|
| @@ -1003,6 +1003,10 @@
|
| ScriptPromise HTMLCanvasElement::createImageBitmap(ScriptState* scriptState, EventTarget& eventTarget, int sx, int sy, int sw, int sh, ExceptionState& exceptionState)
|
| {
|
| ASSERT(eventTarget.toDOMWindow());
|
| + if (!originClean()) {
|
| + exceptionState.throwSecurityError("The canvas element provided is tainted with cross-origin data.");
|
| + return ScriptPromise();
|
| + }
|
| if (!sw || !sh) {
|
| exceptionState.throwDOMException(IndexSizeError, String::format("The source %s provided is 0.", sw ? "height" : "width"));
|
| return ScriptPromise();
|
|
|