141863 - Pref to prevent hiding status bar on all windows

Status: VERIFIED FIXED

(SeaMonkey :: UI Design, enhancement, P2)

Description

[Mitchell Stoltz (not reading bugmail)]

We would like a pref which will force all browser windows to have a status bar
(the one along the bottom of the window) regradless of the window parameters
specified by scripts.

Comment 1

[Dave Barrowman]

Adding nsbeta1 keyword.

Comment 2

[Paul Wyskoczka]

qa --> [e-mail]

Comment 3

[Peter Trudelle]

Nav triage team needs info: Why?  What is the benefit to customers/users?

Comment 4

[Dave Barrowman]

It is a mechanism to thwart a form of chrome-spoofing.  As long as some part of
the chrome can not be overridden by scripts, chrome-spoofing is trickier.  It
specifically prevents spoofing of the lock icon.

Comment 5

[Jesse Ruderman]

See also bug 143886, pref to ignore window.open flags.

Comment 6

[Jesse Ruderman]

Malicious sites can use https, so I don't think it really matters if sites can
spoof the lock icon.  People who find this pref wouldn't give their credit card
number to a random site just because it claims to be secure.

Comment 7

[Dave Barrowman]

A malicious site can use HTTPS, but if site X is trying to spoof site Y, the
lock gives access to the real certificate viewer (not a spoofed one), and the
certificate will identify the actual site (site X).  If I'm able to show a fake
lock icon, I can take you to a fake cert viewer, thereby preventing true
identification of the site.

Comment 8

[Jesse Ruderman]

If you want to keep sites from spoofing other sites, keep the location bar
visible, not the status bar.

Comment 9

[Peter Trudelle]

nsbeta1- per Nav triage team.  Nice to have, but too late for MachV, will
consider for future release.

Comment 10

[Mitchell Stoltz (not reading bugmail)]

OK, I'll take it.

Comment 11

[Heikki Toivonen (remove -bugzilla when emailing directly)]

nsbeta1-

Before you renominate, please query bugs marked nsbeta1+ keyword with [ADT# RTM]
in status whiteboard (where # is a number between 1 and 3) and make sure that
this bug is at least as important as those.

Comment 12

[Boris 'pi' Piwinger]

Dupe of bug 107949 which is more general?

pi

Comment 13

[Christopher Aillon (sabbatical, not receiving bugmail)]

This will be fixed on the trunk by bug 107949, but this bug will be tracking the
feature as it goes on the branch which will include only a fix for preventing
the statusbar from being hidden.  Moving over nsbeta1+ and keywords from bug
107949, and re-assigning to self.

Comment 14

[Christopher Aillon (sabbatical, not receiving bugmail)]

Attachment: Patch v1.0

Refactored code from bug 107949.

Comment 15

[Christopher Aillon (sabbatical, not receiving bugmail)]

Comment on attachment 86324 [details] [diff] [review]
Patch v1.0

Copying over r=danm, sr=jag from the patch in bug 107949

Comment 16

[scottputterman]

adding adt1.0.1+ for adt approval for checkin to the branch.  Please get drivers
approval before checking in.

Comment 17

[chris hofmann]

Comment on attachment 86324 [details] [diff] [review]
Patch v1.0

a=chofmann for 1.0.1 add the fixed1.0.1 keyword and remove mozilla1.0.1+ after
checking in.

Comment 18

[Christopher Aillon (sabbatical, not receiving bugmail)]

Fixed on branch.

Comment 19

[Claudius Gayle]

VERIFIED Fixed on 20020627 branch builds. since this fix doesn't explicitly
exist on trunk builds I'll just set it as verified fixed as well.