W3C home > Mailing lists > Public > whatwg@whatwg.org > April 2012

[whatwg] Fullscreen changes to support <dialog>

From: Edward O'Connor <eoconnor@apple.com>
Date: Mon, 09 Apr 2012 12:53:42 -0700
Message-ID: <m2ehrwbs1l.fsf@eoconnor.apple.com>
Ojan wrote:

> Escape usually calls cancel on dialogs, no? Seems to me that if you
> have a dialog open, esc should cancel the dialog, otherwise it should
> yank all fullscreened elements.

Doesn't this suffer from the same sort of security attack that requires
us to leave all fullscreened elements on ESC?

Attacker opens fullscreen element, displays dialog, styles the dialog to
cover the entire viewport, then makes the fullscreen element into an
emulated desktop. User hits ESC, dialog goes away, and the user is left
in the emulated desktop.


Ted
Received on Monday, 9 April 2012 12:53:42 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 30 January 2013 18:48:07 GMT