I would like to download an image without having it’s URL placed in the browser history and then display it in HTML/Javascript. The URL has sensitive data in it and so it cannot be saved on the client side. Using a POST to get the data from the server seems the best approach to not allow the URL to be saved.
Data URIs would work, except IE doesn’t have strong support for them (size limitations).
Is there another way to get this done? Is there a URI trick or a way to render using a Canvas?
EDIT: To clarify… the data comes from a 3rd party image provider. The sensitive data is authentication parameters that must not be stored on the client side for security purposes.
I assume the sensitive data in the URL is not the web address itself, but rather some parameters passed.
My suggestion: support a one time address with a unique key in it (something like a GUID) that will point to the image. If anyone is trying to use it again it will be useless
Example: