So far it seems to me that CORS isn't properly implemented on the video tag on all browsers in that they still taint the canvas when blitted, preventing further extraction ... Or I'm doing something wrong.
The video source is 192.168.0.206/strawberries.mp4 -- my setup is an IIS 8 server set up at that URL with an h264 mp4 video
http://www.iis.net/configreference/system.webserver/httpprotocol/customheaders
http://www.html5rocks.com/en/tutorials/cors/
http://stackoverflow.com/questions/9192594/canvas-video-cors
http://stackoverflow.com/questions/12458444/enabling-cross-origin-resource-sharing-on-iis7
http://jbuckley.ca/2012/02/cross-origin-video/
http://www.w3.org/TR/html5/embedded-content-0.html#security-with-canvas-elements
https://bugzilla.mozilla.org/show_bug.cgi?id=682299
https://code.google.com/p/chromium/issues/detail?id=173727
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.webServer>
<httpProtocol>
<customHeaders>
<add name="Access-Control-Allow-Origin" value="*" />
<add name="Access-Control-Allow-Headers" value="Accept-Encoding" />
</customHeaders>
</httpProtocol>
</system.webServer>
</configuration>