This issue was fixed in v1.2.11, released a minute ago.
I was never able to reproduce the issue. Could you give it another try and tell me if that works?
This feature was designed to pass a master picture from a WP site under development to RealFaviconGenerator. By “under development”, I mean a WP site that is only accessible by his admin. For example, my WP sandbox is only accessible through 192.168.1.93/wordpress, which is local. So RFG cannot download anything from my blog but my browser can. But that can cause security issues (what you reported, atsepkov).
So I did two things:
– I tried to catch this SecurityError, in order to fail gracefully.
– Since this is the kind of error some browsers may not let you catch (it sounds a bit “fatal”), I also implemented a timeout: if, after 3 seconds, the picture cannot be retrieved, this is certainly the sign that the feature won’t work anyway. The button is enabled again.