123978 2013-11-07 02:19:15 -0800 CORS enabled data:URL images fail to load 2014-06-11 08:25:20 -0700 1 1 1 Unclassified WebKit Images 528+ (Nightly build) Mac OS X 10.9 NEW P2 Normal --- 109199 1 stefankienzle.de webkit-unassigned syoichi youennf oldest_to_newest 948159 0 stefankienzle.de 2013-11-07 02:19:15 -0800 Steps to reproduce the problem: I want to load CORS enabled data:URL images (in JS or HTML) - both cases are failing. JS: var img = document.createElement('img'); img.onload = function () { ... }; img.crossOrigin = ''; img.src = <data-url>; HTML: <img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB4AAAAeCAMAAAAM7l6QAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAAlQTFRFa2tr3Nzc////HKA8dAAAAD9JREFUeNpiYCAAmMCAkQkrTaQ0DkAdaZx2AxmMQAAmYUwmGDmoXU6ZNCPCl5jkoHY5ZU4jyt+D0uV4DQcIMADuxwY6Y1aBvAAAAABJRU5ErkJggg==" crossorigin /> Open this jsfiddle: http://jsfiddle.net/Kienz/Dv3Eu/ You should see three w3c images! What is the expected behavior? Images should be loaded. What went wrong? The images don't load and you got the following error in dev console: Cross-origin image load denied by Cross-Origin Resource Sharing policy. In Safari 5.1 (Windows 7) it works. Safari 7 (Mac OS 10.9) it fails. 1014731 1 youennf 2014-06-11 06:33:50 -0700 The case of crossorigin="anonymous" should be handled once data url processing is handled within WebCore (see bug 109199).