Open Bug 1880634 Opened 3 months ago Updated 3 months ago

MozTogglePictureInPicture event is visible to web content

Categories

(Toolkit :: Picture-in-Picture, defect, P3)

Product:
Toolkit
Component:
Picture-in-Picture
Type:
defect

Tracking

()

People

(Reporter: gregp, Unassigned)

Details

(Keywords: csectype-disclosure, privacy, sec-low)

Attachments

(2 files)

picture_in_picture_bug.html
16.79 KB, text/html
Details
WIP: Bug 1880634 - Use windowUtils.dispatchEventToChromeOnly in Picture-in-Picture
48 bytes, text/x-phabricator-request
Details | Review

Steps to reproduce:

  1. Open the attached test case
  2. Enter Picture-in-Picture

Actual results:
Web content can easily detect when Picture-in-Picture is activated.

Expected results:
Not so.

Isn't this supposed to be a ChromeOnly dispatch?

Severity: -- → S3
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: