so, i found out just now while generating a meme why i was having some problems with images not uploading correctly.
HTML5 canvas access.
this is a functionality that essentially allows a web script to take a snapshot of your web page. it could be used, for example, to capture a revealed password text if the malicious injected script was able to also watch the mouse position and click state and grab nearby areas when mouse events occur, which would be such as clicking the 👁️ next to a password field.
