3 ms·

JavaScript Full Screen API, Navigation Timing and repeating CSS Gradients

• bretthopper 16y ago
  This is part of an ongoing series tracking updates to Webkit and Chromium in case it wasn't clear by the title.
• there 16y ago
  i just downloaded a webkit nightly and tested the full-screen api from his site. my first thought was that someone could make a page respond to a user clicking a link and instead of navigating to it, make the page go full-screen and draw fake window chrome on the page to trick the user into thinking the browser is on a new site. it's like the old window.popup() stuff but this time you can completely remove the browser's own window decorations. i hope the final implementation gets some kind of prompt or other warning to the user before going full-screen.
  • mnutt 16y ago
    The same attack is also possible with Flash's fullscreen; their "Press Esc to exit Fullscreen" message would work fine here too.
    • sil3ntmac 16y ago
      I don't think so... isn't the keyboard disabled in Flash fullscreen? Same goes for Silverlight and Java applets.
      • trampsymphony 16y ago
        The keyboard remains active in Flash fullscreen, though you cannot bind anything to the "ESC" key if I'm remembering correctly.