 <p>The local file system is declared to be cross-origin and will taint the canvas. This is a good declaration given that your most sensitive information is probably on a local file system.</p> <p>Here are some ways to be compliant with CORS security:</p> <ul> <li><p>Install a web server on your local computer and serve both your images and .html/.css/.js files on that server. PHP &amp; IIS both have excellent local editions.</p></li> <li><p>Put your images on a CORS compliant hosting service (imagur.com is one among others)</p></li> <li><p>For small projects, it sometimes works to put both the image and webpage files all on the desktop.</p></li> </ul>