The only interesting implementation of this (SVGImage) is not related to multiple origins (or CORS at all), but instead to SVG foreign object possibly tainting the <canvas> in a different way (by drawing visited colours, spellcheck etc).
<rdar://102738351>
Pull request: https://github.com/WebKit/WebKit/pull/8602
Committed 258969@main (5cfdacb9f77c): <https://commits.webkit.org/258969@main> Reviewed commits have been landed. Closing PR #8602 and removing active labels.