The answer can be found in the specification.
For img
:
The
crossorigin
attribute is a CORS settings attribute. Its purpose is to allow images from third-party sites that allow cross-origin access to be used withcanvas
.
and for script
:
The
crossorigin
attribute is a CORS settings attribute. It controls, for scripts that are obtained from other origins, whether error information will be exposed.