3 ms·
I don't think browsers will ever let web code affect things outside the viewport because scammers would cook up some truly zany things with that power.
by caesil 2y ago
I don't think browsers will ever let web code affect things outside the viewport because scammers would cook up some truly zany things with that power.
- immibis 2y agoEven rendering arbitrary pixels inside the viewport is bad enough. Something that went out of fashion but is apparently now back in fashion is detecting the user's operating system and browser, then displaying a pixel-perfect replica of a second browser window open to Paypal and asking you to log in... displayed within the bounds of the first browser window.
- afiori 1y agoThis is why the new login prompt of 1Password is worse than the old one, it appears at the center of the screen where the website could easily put a replica. The old one opened at the height of the extension icon, a bit above where the browser opens the alert dialog