createImageBitmap's note is wrong

[shhnjk]

https://html.spec.whatwg.org/multipage/imagebitmap-and-animations.html#images-2:dom-createimagebitmap

Rejects the promise with a "SecurityError" DOMException if the script is not allowed to access the image data of the source image (e.g. a video that is CORS-cross-origin, or a canvas being drawn on by a script in a worker from another origin).

Creating Bitmap image from CORS-cross-origin source shouldn't be an issue. Especially there's a origin-clean logic in createImageBitmap

[domenic]

Good catch; the normative text does not include any "SecurityError" DOMException.

I think the correct fix here is to just remove that sentence. Would you be interested in doing so?

[annevk]

We should probably have some tests though since I think currently it does throw that error in implementations at times.

[shhnjk]

We should probably have some tests though since I think currently it does throw that error in implementations at times.

Yup, Firefox throws a Security Error.

Would you be interested in doing so?

I don't know how to add a test ;) So you can take it.