[w3c/pointerlock] User gesture requirement allows for abuse. (#59)

Websites can stop users from navigating away from the site by using something like:
document.onmousemove = function(){lock_element.requestPointerLock();};
This is a terrible user experience. While it is easy enough to use shortcuts to close the tab or something like that many novice users will feel stuck and get frustrated hitting escape only to get locked again.  

Could we change the requirement to be a bit more strict than simply user gesture? I propose we either disallow mouse movement or specifically require a click instead of just a generic user gesture.

Another solution might be to only allow a certain number of re-requests before prompting the user?

Thoughts?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/pointerlock/issues/59