title: IE10 and Cross-origin resource sharing (CORS) issues with Image / Canvas
body: <p>I was under the impression that Internet Explorer 10 fully supported CORS, but now I'm not sure.</p>
  
  <p>We have a JS/HTML5 App that uses multiple domains, and reads image data. We are loading images in the JS from another domain, imageDraw()ing the image to our canvas, and then using getImageData on the canvas.  (We aren't using cross-domain XMLHttpRequests). For this to work we have had to set response headers on the server that's serving the images:</p>
  
  <pre><code>access-control-allow-origin: *
  access-control-allow-credentials: true
  </code></pre>
  
  <p>And set this on the image object in the JS before loading: </p>
  
  <p><code>image.crossOrigin = 'Anonymous'; //Also tried lowercase</code></p>
  
  <p><strong>This is working fine for all new browsers, <em>apart from IE10</em> which is throwing security errors when we try to read the data.</strong></p>
  
  <pre><code>SCRIPT5022: SecurityError
  </code></pre>
  
  <p><strong>Is there something more that needs to be done for IE10 to treat these cross domain images as not tainting?</strong></p>
  
  <p>UPDATE:</p>
  
  <p>I noticed <a href="https://stackoverflow.com/a/14806095/324381">this answer</a> to a previous question.  <strong>Interestingly <a href="http://jsfiddle.net/WLTqG/29/" rel="nofollow noreferrer">this JSFiddle</a> also does not work for IE10 - can anyone confirm that this does not work in their IE10?</strong></p>