Earlier quoted context omitted.
11.2.1. But I guess in tech, that's the wild-west stone age where you couldn't expect a browser not to be taken over by a site ...
Why the negativity? Software is fluid and never perfect. And specially the fight between browsers and malicious sites won't stop at any time ... At least they recognized the problem and acted on it.
Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
71–80 of 82 posts
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#72> this issue has gone unfixed, for unknown reasons The reason is just that no-one has thought it important enough to fix, and/or no-one has been able to get sufficient agreement on what the correct fix is. Let's not pretend there's a mystery.
AFAIK, there are still no usable built-in date pickers or upload controls.
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#73Earlier quoted context omitted.
Also such sites sometimes play audio instructions trying to scare or deceive a user.
I've had relatives tricked by this and called the number for "Microsoft Support." They were using Chrome. Clicking on the browser outside of the page area resulted in the tab going full screen again somehow, and they used multiple other tricks to make the page impossible to close (e.g. looping message boxes). I don't think browser vendors take these issues very easy. But when I tell relatives to hit the escape key an…
I (an experienced user) couldn't quickly figure out that it was actually a fullscreen mode, couldn't understand why the browser doesn't launch and thought it was some kind of virus in the system. I figured it out only when I tried to move mouse upwards and a browser UI appeared.
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#74> this issue has gone unfixed, for unknown reasons The reason is just that no-one has thought it important enough to fix, and/or no-one has been able to get sufficient agreement on what the correct fix is. Let's not pretend there's a mystery.
Clearly, in the eyes of browser developers basic UI is far less important than 3d rendering, web assembly, progressive API and other features used by .000001% of all websites. AFAIK, there are still no usable built-in date pickers or upload controls.
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#75Earlier quoted context omitted.
And yet issues that affect advertising revenue on Youtube get fixed same day.
Something like 80-90% of their revenue comes from Google. Their higher-ups can spin it all day, but they know damn well their jobs depend on a good relationship with Google.
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#76Earlier quoted context omitted.
Yet another reason to do it -- so that bug reports about websites not working without Javascript are taken seriously, and fixed.
Or they'll continue to be ignored, because they're not bugs with the website.
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#77Earlier quoted context omitted.
Clearly, in the eyes of browser developers basic UI is far less important than 3d rendering, web assembly, progressive API and other features used by .000001% of all websites. AFAIK, there are still no usable built-in date pickers or upload controls.
Firefox has built in date pickers now, built in upload controls I have never seen, got an example?
As far as uploads, no large website ever uses the default ones. All of them roll their own using JavaScript APIs. The most popular example is probably Gmail attachments.
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#78for(a=0;a
Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#79Re: Malicious sites abuse 11-year-old Firefox bug that Mozilla failed to fix
#80One of the sites opened fullscreen mode to hide browser UI. Note that currently web browser developers are implementing a fullscreen mode with keyboard lock that is much harder to leave because it blocks most of system key combinations: [1]. The only keys that will still work are Ctrl + Alt + Del or holding an Esc for two seconds. And as I assume you cannot leave it using mouse or touchpad. Another problem is that br…
It's being championed by the Chromium team, and just because Chromium has turned something on doesn't mean it's a standard. It just means that Chromium doesn't know how to properly launch experimental browser settings behind user flags, because apparently we've all learned literally nothing from the early days of browser-specific CSS tags and the botched release of flexbox.
Remember HTML imports, Observable, etc... there's still plenty of time to file issues[0] and participate in conversation about the feature[1]. And I encourage you to do so, because speaking as a game developer on the web, this is a bad feature that shouldn't be built.
[0]: https://github.com/w3c/keyboard-lock/issues
[1]: https://discourse.wicg.io/t/proposal-system-keyboard-lock-ap...