The PoC does not work on my machine. The prompt does not appear at the mouse cursor position. Looking at the code and the video this is yet another bypass of the extra security delay added in Bug 1857430. This time the popup requests a permission during a full screen transition. While the method of getting a full screen transition overlap is slightly different, one could argue that this is effectively a dupe of Bug 1865914 or Bug 1866210. Gijs, what do you think? At what point should we treat it as a dupe? Should we treat all bugs that create a race condition between full screen transition and PopupNotification as one bug? The patches in Bug 1865914 fix this bug.
Bug 1866592 Comment 3 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
The PoC does not work on my machine. The prompt does not appear at the mouse cursor position. Looking at the code and the video this is yet another bypass of the extra security delay added in Bug 1857430. This time the popup requests a permission during a full screen transition. While the method of getting a full screen transition overlap is slightly different, one could argue that this is effectively a dupe of Bug 1865914, Bug 1867192 or Bug 1866210. Gijs, what do you think? At what point should we treat it as a dupe? Should we treat all bugs that create a race condition between full screen transition and PopupNotification as one bug? The patches in Bug 1865914 fix this bug.
The PoC does not work on my machine. The prompt does not appear at the mouse cursor position. Looking at the code and the video this is yet another bypass of the extra security delay added in Bug 1857430. This time the popup requests a permission during a full screen transition. While the method of getting a full screen transition overlap is slightly different, one could argue that this is effectively a dupe of Bug 1865914, Bug 1867192, Bug 1865465 or Bug 1866210. Gijs, what do you think? At what point should we treat it as a dupe? Should we treat all bugs that create a race condition between full screen transition and PopupNotification as one bug? The patches in Bug 1865914 fix this bug.