New: Canvas finger protection via user interaction when a canvas attempts to obtain its data URL.
Fix: No longer run on XML pages.