1822298 - Block the fullscreen notification on Android using download popups + keyboard + landscape

Status: RESOLVED FIXED

(Fenix :: General, defect)

Description

[haxatron1]

Attachment: fullscreen-bypass.html

Using a long download popup + keyboard, it is possible to push the fullscreen notification out of bounds on FF for Android.

STR

1. Go to landscape mode.
2. Click on input button in Firefox (tested on Nightly version)

Comment 1

[haxatron1]

Attachment: mobizen_20230314_212133.mp4

Video.

Comment 2

[haxatron1]

cced [e-mail] as they worked on https://bugzilla.mozilla.org/show_bug.cgi?id=1783561

Comment 3

[Petru-Mugurel Lingurar [:petru]]

Agree that this is a variation of bug 1783561.
Even though the download dialog is smaller than the screen and there should be enough space left to show the fullscreen snackbar if the keyboard is also showing then there won't be any available space for the the snackbar.

Comment 4

[Petru-Mugurel Lingurar [:petru]]

This would be fixed by bug 1816059.

Comment 5

[haxatron1]

Thanks, is this a duplicate of bug 1816059?

Comment 6

[Daniel Veditz [:dveditz]]

It is provisionally a duplicate, but we'll see if that actually fixes this rather than jump the gun with an assumption.

Comment 7

[Petru-Mugurel Lingurar [:petru]]

The fix for bug 1816059 is now live in the latest Nightly.
It should ensure that the message informing users about the page entering fullscreen cannot be obscured anymore.
@haxatron1 Can you confirm that applies for this issue also?

Comment 8

[haxatron1]

yes it seems fixed.

Comment 9

[Petru-Mugurel Lingurar [:petru]]

Thank you!
Closing this as fixed.
Tom to handle the bounty status.

Comment 10

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

We will address it in the weekly bounty meeting, thanks!

Comment 11

[Daniel Veditz [:dveditz]]

As we expected, this did turn out to be fixed by the redesigned mechanism in bug 1816059 making this essentially a dupe for purposes of the bug bounty.

Comment 12

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

Attachment: advisory.txt