I have a JS library in a static resource. This library's code renders a with a Chatter Profile picture taken from the results of a
[SELECT FullPhotoUrl FROM User]
Or at least tries to.
This doesn't work as the JS is delivered from another subdomain
than the Profile pics:
I get a
Unable to get image data from canvas because the canvas has been tainted by cross-origin data.
In a non-cloud world one would work with a proxy or set on the server:
access-control-allow-origin: [your site] access-control-allow-credentials: true