As per https://drafts.csswg.org/css-shapes/#shape-outside-property, credentials should be set to same-origin.
Created attachment 332306 [details] Patch
<rdar://problem/36880534>
Comment on attachment 332306 [details] Patch r=me
Comment on attachment 332306 [details] Patch Clearing flags on attachment: 332306 Committed r227635: <https://trac.webkit.org/changeset/227635>
All reviewed patches have been landed. Closing bug.