Security warning in browser console

[peterspicer-catalyst]

Current versions of both Firefox and Chrome complain during the processing of the favicon - specifically at

moodle-local_envbar/renderer.php

Line 377 in 36ee6b5

favicon.href = canvas.toDataURL("image/x-icon");

- with the following exception:

Uncaught DOMException: Failed to execute 'toDataURL' on 'HTMLCanvasElement': Tainted canvases may not be exported.

[brendanheywood]

I can't reproduce that on chrome 79 or FF 72, any more details? From a quick google that doesn't look like an error that would have started with a recent new version, I suspect this has more to do with the original favicon url, ie a CORS issue:

https://developer.mozilla.org/en-US/docs/Web/HTML/CORS_enabled_image#Security_and_tainted_canvases