Bugzilla

I think for gUM prompts there is a similar risk. Sites may try to trap less experienced users in full screen and get them to allow access to camera / mic or start a screen share. Currently we can't really show permissions prompts in full screen without this spoofing risk.

For scenarios like in Bug 1745575, could the website simply call `gUM`, pop out of full screen and enter full screen again once the prompt has been accepted? This way the context of the permission request would be clear and no additional click is required. If there is already a temporary permission set, gUM will succeed without a prompt and Firefox will not leave full screen.

I've created a demo page here: https://ivy-bald-headlight.glitch.me/

I think for gUM prompts there is a similar risk. Sites may try to trap less experienced users in full screen and get them to allow access to camera / mic or start a screen share. Currently we can't really show permissions prompts in full screen without this spoofing risk.

For scenarios like in Bug 1745575, could the website simply call `gUM`, pop out of full screen and enter full screen again once the prompt has been accepted? This way the context of the permission request would be clear and no additional click is required. If there is already a temporary permission set, gUM will succeed without a prompt and Firefox will not leave full screen.

I've created a demo page here: https://ivy-bald-headlight.glitch.me/

Edit: Bug 1355000 makes the flow a bit confusing, because the PopupNotification used for the permission request looses its anchor point. So this would be worth prioritizing if this is a common scenario.

I think for gUM prompts there is a similar risk. Sites may try to trap less experienced users in full screen and get them to allow access to camera / mic or start a screen share. Currently we can't really show permissions prompts in full screen without this spoofing risk.

For scenarios like in Bug 1745575, could the website simply call `gUM`, pop out of full screen and enter full screen again once the prompt has been accepted? This way the context of the permission request would be clear and no additional click is required. If there is already a temporary permission set, gUM will succeed without a prompt and Firefox will not leave full screen.

I've created a demo page here: https://ivy-bald-headlight.glitch.me/

Edit: Bug 1355000 makes the flow a bit confusing, because the PopupNotification used for the permission request looses its anchor point when leaving full screen. This would be worth prioritizing if this is a common scenario.