top | item 2098473

JavaScript Full Screen API, Navigation Timing and repeating CSS Gradients

24 points| typester | 15 years ago |peter.sh

5 comments

order

there|15 years ago

i just downloaded a webkit nightly and tested the full-screen api from his site.

my first thought was that someone could make a page respond to a user clicking a link and instead of navigating to it, make the page go full-screen and draw fake window chrome on the page to trick the user into thinking the browser is on a new site. it's like the old window.popup() stuff but this time you can completely remove the browser's own window decorations.

i hope the final implementation gets some kind of prompt or other warning to the user before going full-screen.

mnutt|15 years ago

The same attack is also possible with Flash's fullscreen; their "Press Esc to exit Fullscreen" message would work fine here too.

bretthopper|15 years ago

This is part of an ongoing series tracking updates to Webkit and Chromium in case it wasn't clear by the title.