1828259 - (CVE-2024-5698) Datalist option overlap url address bar after exiting full screen

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect, P3)

Description

[Hafiizh]

Attachment: bandicam 2023-04-15 17-36-02-809.mp4

after fixed on https://bugzilla.mozilla.org/show_bug.cgi?id=1826622, i found other way to make the option overlap the url address bar

step to produces

1. open http://103.186.0.20/dtlist.html or dtlist.html
2. press fn+ f11 to fullscreen
3. press h on datalist.
   4 press fn+ f11 to exit fullscreen, then the option overlap on address bar

tested on 114.0a1 (2023-04-14) (64-bit) (windows 10 home)

Comment 1

[Hafiizh]

Attachment: dtlist.html

Comment 2

[Andrew McCreight [:mccr8]]

I'll give this a more specific description to distinguish it from the other bug

Comment 3

[Daniel Veditz [:dveditz]]

This doesn't work on Mac: the datalist closes when we exit fullscreen.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:emilio, could you have a look please?

For more information, please visit BugBot documentation.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:serg, could you have a look please?

For more information, please visit BugBot documentation.

Comment 7

[Hafiizh]

hello any updates?

Comment 8

[Hafiizh]

hello any updates?

Comment 9

[Hafiizh]

hello any updates?

Comment 10

[Edgar Chen [:edgar]]

Attachment: Bug 1828259 - Close autocomplete popup when window is resized; r?dimi

Comment 12

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a9fd576e6dae
Close autocomplete popup when window is resized; r=dimi

Comment 13

[Pulsebot]

Backout by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a234c7e39872
Backed out changeset a9fd576e6dae for causing bc failures on browser_window_resize.js CLOSED TREE

Comment 14

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Backed out for causing bc failures in browser_window_resize.js
https://hg.mozilla.org/integration/autoland/rev/a234c7e3987289d24292a5058b9edfd79e5b4509

Push with failure
Failure log

TEST-UNEXPECTED-FAIL | toolkit/components/satchel/test/browser/browser_window_resize.js | leaked 1 window(s) until shutdown [url = about:blank]

Comment 16

[BugBot [:suhaib / :marco/ :calixte]]

The severity field for this bug is set to S3. However, the following bug duplicate has higher severity:

• Bug 1875630: S2

:edgar, could you consider increasing the severity of this bug to S2?

For more information, please visit BugBot documentation.

Comment 17

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5c3a58685415
Close autocomplete popup when window is resized; r=dimi

Comment 18

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/5c3a58685415

Comment 19

[BugBot [:suhaib / :marco/ :calixte]]

The patch landed in nightly and beta is affected.
:edgar, is this bug important enough to require an uplift?

• If yes, please nominate the patch for beta approval.
• If no, please set status-firefox123 to wontfix.

For more information, please visit BugBot documentation.

Comment 20

[Pascal Chevrel:pascalc]

This is S3 & sec-low, we probably can let it ride the trains.

Comment 21

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Backed out for causing test failures on the geckoview bump:
https://hg.mozilla.org/mozilla-central/rev/348b614f401def219f27fea5f374f6e3b822de1c

Comment 22

[Pulsebot]

Backout by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/8261e82577cf
Backed out changeset 5c3a58685415 for causing test failures on the GV bump on firefox-android. a=backout CLOSED TREE

Comment 23

[BugBot [:suhaib / :marco/ :calixte]]

There is an r+ patch which didn't land and no activity in this bug for 2 weeks.
:edgar, could you have a look please?
If you still have some work to do, you can add an action "Plan Changes" in Phabricator.
For more information, please visit BugBot documentation.

Comment 24

[Edgar Chen [:edgar]]

I need to figure out what we can do for GV failures.

Comment 25

[Edgar Chen [:edgar]]

This is a general issue of the XUL popup + fullscreen, I will handle this in a more generic way.

Comment 26

[Edgar Chen [:edgar]]

Attachment: Bug 1828259 - Close XUL popup when entering/exiting fullscreen; r?smaug

Comment 27

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/c1d8b49c933b
Close XUL popup when entering/exiting fullscreen; r=smaug

Comment 28

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/c1d8b49c933b

Comment 30

[Tom Ritter [:tjr]]

Attachment: advisory.txt