From MDN:
Although you can use images without CORS approval in your canvas, doing so taints the canvas. Once a canvas has been tainted, you can no longer pull data back out of the canvas.
So the image you are drawing on your canvas comes from another domain, and so you are not allowed to use the canvas to export the data. See the MDN article for more info.