2 ms·
> which renders OS-native text input and button widgets Not anymore in browsers with content process isolation (which is essentially all of them). Native contr
by rafram 4y ago
> which renders OS-native text input and button widgets
Not anymore in browsers with content process isolation (which is essentially all of them). Native controls have to be imitated.
- eyelidlessness 4y agoI’m confused. Why would browsers’ isolation of anything preclude rendering native controls? Native controls aren’t all in some global singleton process shared across non-browser apps (at least not in any environment I’m aware of, and the thought of a design like that fills me with dread). All a browser needs to do to render native controls securely is to render them as opaque to the JS/DOM runtime. This has even been formalized as “shadow DOM”. At least so far as I’m aware, Safari still renders native controls by default. Other browsers vary in their use of native controls but that’s been the case for decades.
- jcelerier 4y ago> Native controls aren’t all in some global singleton process windows used to render scrollbars in-kernel (idk if it still does but it even did for 10: https://www.fortinet.com/blog/threat-research/one-bit-to-rule-them-all-bypassing-windows-10-protections-using-a-single-bit https://www.fortinet.com/blog/threat-research/one-bit-to-rul... )
- eyelidlessness 4y agoHoly hell