fix: Exclude Base64 images from image worker handling (#500)

In Chrome versions before 67, data: URLs were treated as
uncertain-origin resources for security reasons. In this context:

XMLHttpRequest did not allow access to base64 (data:) URLs because it
violated CORS (Cross-Origin Resource Sharing) policies. Even though a
data: URL is "local," it was still considered a different origin from
the domain where the request was made.

Author: wouterlucas

src/core/lib/utils.ts

@@ -304,3 +304,7 @@ export function convertUrlToAbsolute(url: string): string {
   const absoluteUrl = new URL(url, self.location.href);
   return absoluteUrl.href;
 }
+
+export function isBase64Image(src: string) {
+  return src.startsWith('data:') === true;
+}

src/core/textures/ImageTexture.ts

@@ -23,7 +23,7 @@ import {
   isCompressedTextureContainer,
   loadCompressedTexture,
 } from '../lib/textureCompression.js';
-import { convertUrlToAbsolute } from '../lib/utils.js';
+import { convertUrlToAbsolute, isBase64Image } from '../lib/utils.js';
 import { isSvgImage, loadSvg } from '../lib/textureSvg.js';
 
 /**
@@ -135,7 +135,7 @@ export class ImageTexture extends Texture {
   async loadImageFallback(src: string, hasAlpha: boolean) {
     const img = new Image();
 
-    if (!src.startsWith('data:')) {
+    if (isBase64Image(src) === false) {
       img.crossOrigin = 'anonymous';
     }
 
@@ -206,6 +206,7 @@ export class ImageTexture extends Texture {
 
     if (this.txManager.hasCreateImageBitmap === true) {
       if (
+        isBase64Image(src) === false &&
         this.txManager.hasWorker === true &&
         this.txManager.imageWorkerManager !== null
       ) {