Our tiny jQuery/Bootstrap rich text editor is now open-source

Re:Our tiny jQuery/Bootstrap rich text editor is now open-so... by uptown on Sunday April 07, 2013 @12:17PM (#5507640)

I'm curious about the voice-input feature. In your example, it's activated by clicking the microphone - but could a website activate this without a click (or by tricking a user into clicking something they thought was performing some other function)? Providing the ability to listen in and capture the audio from a user's location without any prompt seems like a huge potential security issue to me.

[ Parent | on HN ]

Re:Our tiny jQuery/Bootstrap rich text editor is now open-so... by gojko on Sunday April 07, 2013 @12:22PM (#5507655)

no, this is an input field with chrome speech enabled (<input type="text" x-webkit-speech>). The microphone icon you see is the right part of that field, and the text is transparent. We've done it like that because at the moment only input fields support speech input in chrome, and we couldn't find a way to activate programatically.

There is no onclick event on that part, it's just part of the text field.

[ Parent | on HN ]

Re:Our tiny jQuery/Bootstrap rich text editor is now open-so... by uptown on Sunday April 07, 2013 @12:28PM (#5507676)

Interesting. I'd known Chrome supported Voice input - just never tried it like this. For anyone wishing to disable this in your browser, the Chrome Extension TamperMonkey allows you to install UserScripts easily, and the UserScript named "Disable HTML5 Voice Search" on userscripts.org programmatically disables any voice-input controls on the pages you visit.

[ Parent | on HN ]