Re: [w3c/pointerlock] User gesture requirement allows for abuse. (#59) from Vincent Scheib on 2020-03-04 (public-webapps-github@w3.org from March 2020)

From: Vincent Scheib <notifications@github.com>
Date: Wed, 04 Mar 2020 08:45:11 -0800
To: w3c/pointerlock <pointerlock@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <w3c/pointerlock/issues/59/594653157@github.com>

Pointer lock should not be possible without a user gesture.  If the web app
is rapidly lock/unlocking then the exit instructions should stay visible
(if not, file a bug on whichever browsers).  If the user presses ESC then
it web app is not allowed to relock, because there hasn't been a user
gesture.  If that is happening, again file a browser bug.

I don't think there's a spec issue here, unless I'm confused?  The user
gesture requirement is precisely what should be preventing this malicious
pattern.

>


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/pointerlock/issues/59#issuecomment-594653157

Received on Wednesday, 4 March 2020 16:45:23 UTC