“Cross-Origin Resource Sharing policy” Between Subdomains in JS?

Question

I have a Tumblr theme that includes a canvas script.
The Cross-Origin Resource Sharing policy doesn't allow context.getImageData() to work. Script is located at user.tumblr.com,
images are located at static.tumblr.com.

Is there any solution for this?

Thank you!

score 0 · Answer 1 · answered Jan 24 '13 at 10:42

0

document.domain will be your friend there.

I haven't studied the canvas security model closely, but if it follows the rest of Javascript, setting

document.domain = tumblr.com

might help.

(Googling for document.domain canvas may lead to more.)

answered Jan 24 '13 at 10:42

Jeremy J Starcher

23,369
6
54
74

The last sentence is a bit too general. Have you tried it and found something valuable? – Bergi Jan 24 '13 at 11:17
Can't say I have -- I don't use canvas much. However, I figured that giving a couple of key phrases might let the OP explore options. – Jeremy J Starcher Jan 24 '13 at 11:20

“Cross-Origin Resource Sharing policy” Between Subdomains in JS?

1 Answers1

Linked