Skip to content

Commit

Permalink
Remove TAO check from element timing reporting
Browse files Browse the repository at this point in the history
The TAO check does not add any security measure, given rendering same-origin and
cross-origin images in the same frame would result in the same renderTime.

Closes #104
  • Loading branch information
noamr committed Nov 4, 2024
1 parent 4809157 commit d5cfcf9
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -300,8 +300,7 @@ To <dfn>process an image that finished loading</dfn> given an {{Element}} |eleme
1. If |root| is not a {{Document}}, return.
1. Let |now| be the [=current high resolution time=] given |element|'s <a>relevant global object</a>.
1. Let |record| be a [=pending image record=] with [=pending image record/element=] |element|, [=pending image record/request=] |imageRequest| and [=pending image record/loadTime=] |now|.
1. If |imageRequest| is a data URL [[RFC2397]], or the <a>timing allow check</a> succeeds for |imageRequest|'s resource, add |record| to |root|'s [=images pending rendering=].
1. Otherwise, [=report element timing=] given |root|, |now|, «|record|» and «».
1. Add |record| to |root|'s [=images pending rendering=].
</div>

Reporting paint timing {#sec-reporting-paint-timing}
Expand Down

0 comments on commit d5cfcf9

Please sign in to comment.