[Bug 29580] New: MouseEvent.screen{X,Y} leaks window location

https://www.w3.org/Bugs/Public/show_bug.cgi?id=29580

            Bug ID: 29580
           Summary: MouseEvent.screen{X,Y} leaks window location
           Product: CSS
           Version: unspecified
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: CSSOM View
          Assignee: simonp@opera.com
          Reporter: w3bugs@chrisrebert.com
        QA Contact: public-css-bugzilla@w3.org
  Target Milestone: ---

https://drafts.csswg.org/cssom-view/#dom-mouseevent-screenx

[[
The screenX attribute must return the x-coordinate of the position where the
event occurred relative to the origin of the screen.

The screenY attribute must return the y-coordinate of the position where the
event occurred relative to the origin of the screen.
]]

The concern here is similar to Bug 29577. Webpages shouldn't be able to infer
the location of their window on my screen by computing the difference between
coordinate system origin points.
The spec should permit privacy-conscious browsers to (consistently) replace the
"screen" coordinate system with the "viewport" (or "window"?) coordinate
system, thus pretending the browser is always full-screen.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Wednesday, 20 April 2016 03:48:09 UTC