- From: <bugzilla@jessica.w3.org>
- Date: Wed, 20 Apr 2016 03:48:07 +0000
- To: public-css-bugzilla@w3.org
https://www.w3.org/Bugs/Public/show_bug.cgi?id=29580 Bug ID: 29580 Summary: MouseEvent.screen{X,Y} leaks window location Product: CSS Version: unspecified Hardware: PC OS: All Status: NEW Severity: normal Priority: P2 Component: CSSOM View Assignee: simonp@opera.com Reporter: w3bugs@chrisrebert.com QA Contact: public-css-bugzilla@w3.org Target Milestone: --- https://drafts.csswg.org/cssom-view/#dom-mouseevent-screenx [[ The screenX attribute must return the x-coordinate of the position where the event occurred relative to the origin of the screen. The screenY attribute must return the y-coordinate of the position where the event occurred relative to the origin of the screen. ]] The concern here is similar to Bug 29577. Webpages shouldn't be able to infer the location of their window on my screen by computing the difference between coordinate system origin points. The spec should permit privacy-conscious browsers to (consistently) replace the "screen" coordinate system with the "viewport" (or "window"?) coordinate system, thus pretending the browser is always full-screen. -- You are receiving this mail because: You are the QA Contact for the bug.
Received on Wednesday, 20 April 2016 03:48:09 UTC