3 ms·
Somewhat related, I saw a site today that did a fake Cloudflare style bot check countdown, and then said “click allow to confirm you’re not a bot” before poppin
by mcintyre1994 7y ago
Somewhat related, I saw a site today that did a fake Cloudflare style bot check countdown, and then said “click allow to confirm you’re not a bot” before popping up a notification send request UI. I bailed then but presumably it wouldn’t show anything if you declined that, who knows what spam they were sending if you didn’t. Thought that was a clever-ish very shitty way to work around permissions.
- gtsteve 7y agoI had hoped that the notification API would just silently not send a notification if the user had explicitly denied this. Unfortunately that's not the case: https://developer.mozilla.org/en-US/docs/Web/API/Notification/permission https://developer.mozilla.org/en-US/docs/Web/API/Notificatio... It's a shame the designers of this feature didn't think of the abuse potential.
- simcop2387 7y agoI'd like to have that option, but i can understand why they did it this way. If you just hide the notification then the site can still use them to get around other restrictions like how much time the javascript is allowed to run in the background and things like that.