security.pattern.cross Using an unclean pattern makes the target canvas origin-unclean, not the pattern canvas Spec references: security.start Actual output: Failed assertion: should throw exception: canvas.toDataURL() Failed assertion: should throw exception: ctx.getImageData(0, 0, 1, 1)