HN.zip

The HTML-in-Canvas API origin trial

27 points by andrewstuart - 7 comments
chrismorgan [3 hidden]5 mins ago
(May 2026.)

Related bunch of comments from that time: https://news.ycombinator.com/item?id=48201222

dvh [3 hidden]5 mins ago
Wouldn't it make more logical sense to add canvas to html elements? I.e. checkbox.getContext("2d").fillRect(...)
aroman [3 hidden]5 mins ago
I guess there are uses for that, but as a web game developer, that wouldn’t really help me. The killer feature is input and text rendering.
chews [3 hidden]5 mins ago
Yo dog, we put a DOM in your Canvas in your DOM.
avaer [3 hidden]5 mins ago
Back in the WebVR days the sentiment was we can never do this because security.

In my experience with standards bodies/Chrome, anything outside of the owning company's product goals is "no, because security", and then then they flip-flop on that when the browser feature becomes a dependency for something an internal team is working on (which happened many times with WebVR, now WebXR).

So I'm curious what is Google working on that has this as a dependency, now that they've 180'd on it?

bawolff [3 hidden]5 mins ago
"Security" is usually not a binary, but how much money you are willing to spend to figure out a way to do it securely. It shouldn't be surprising that chrome spends more resources on things that have a business case than things that do not.
thomasikzelf [3 hidden]5 mins ago
This had to do with leaking privacy sensitive information such as visited links by reading back pixels from a rendered <a>. They fixed this with a concept they call "read-back-allowed rendering"