we need this permission to use `getImageData` on images from other origins