JavaScript Full Screen API, Navigation Timing and repeating CSS Gradients

Re:JavaScript Full Screen API, Navigation Timing and repeati... by there on Wednesday January 12, 2011 @10:34PM (#2098745)

i just downloaded a webkit nightly and tested the full-screen api from his site.

my first thought was that someone could make a page respond to a user clicking a link and instead of navigating to it, make the page go full-screen and draw fake window chrome on the page to trick the user into thinking the browser is on a new site. it's like the old window.popup() stuff but this time you can completely remove the browser's own window decorations.

i hope the final implementation gets some kind of prompt or other warning to the user before going full-screen.

[ Parent | on HN ]

Re:JavaScript Full Screen API, Navigation Timing and repeati... by mnutt on Wednesday January 12, 2011 @11:57PM (#2098899)

The same attack is also possible with Flash's fullscreen; their "Press Esc to exit Fullscreen" message would work fine here too.

[ Parent | on HN ]

Re:JavaScript Full Screen API, Navigation Timing and repeati... by sil3ntmac on Thursday January 13, 2011 @02:02AM (#2099100)

I don't think so... isn't the keyboard disabled in Flash fullscreen? Same goes for Silverlight and Java applets.

[ Parent | on HN ]

Re:JavaScript Full Screen API, Navigation Timing and repeati... by trampsymphony on Thursday January 13, 2011 @02:08AM (#2099109)

The keyboard remains active in Flash fullscreen, though you cannot bind anything to the "ESC" key if I'm remembering correctly.

[ Parent | on HN ]