showPicker overrides other browser notifications and blocks key presses.
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
People
(Reporter: Laraweron, Assigned: canadahonk)
References
Details
(Keywords: csectype-spoof, reporter-external, sec-moderate, Whiteboard: [reporter-external] [client-bounty-form] [verif?][adv-main129-])
Attachments
(3 files)
The showPicker function overlaps all browser notifications, including the notification about entering fullscreen mode. If you set the setInterval function to 0ms, the window will not disappear from the screen. Also, we can bypass the restriction on full screen mode for a single click by introducing a delay in the code. After that, we can stop part of the code execution and create the appearance that the user has switched to another site. Somehow, showPicker with setInterval set to 0ms completely blocks key presses, making it impossible to exit the window. The only way to close the window is to press Ctrl+W.
In my example, I didn't create a fake image of the address bar. There's too much front end work, but it's entirely possible.
To reproduce the fake error, run poc.html. Click on the button.
For the other code in esc.html, click anywhere on the screen. To exit, press Ctrl+W; I haven't found another way.
Updated•2 years ago
|
I created a test example at: https://notgreendewald.online/not3.html
I think it can be improved.
| Assignee | ||
Comment 5•2 years ago
|
||
Bug 1877969 might fix this, needs more investigation once it is pushed.
Updated•2 years ago
|
Comment 6•2 years ago
|
||
We'll have to figure out which of the variants are dupes when we fix it. This looks maybe the same as bug 1875354
Updated•2 years ago
|
Patch D209667 partially fixed the esc key lock, but a bug appeared. After exiting full screen mode, the text will be highlighted. After exiting full screen mode, hover your cursor over the address bar.
Comment 8•2 years ago
|
||
Oliver, is it worth filing a bug about comment 7? Thanks.
| Assignee | ||
Comment 9•2 years ago
|
||
This seems partially fixed with Bug 1877969 but still behaving weird and worth some effort imo.
Comment 10•2 years ago
|
||
It seemed to work as expected to me when testing poc.html or https://notgreendewald.online/not3.html.
Is this still reproducible to you, dear reporter?
| Reporter | ||
Comment 11•2 years ago
|
||
The bug is completely fixed, I don't see any errors
Comment 12•2 years ago
|
||
Thank you very much for the confirmation.
Updated•2 years ago
|
Updated•2 years ago
|
Comment 13•2 years ago
|
||
As expected these .showPicker() bugs were all the same fundamental flaw.
Updated•2 years ago
|
Updated•2 years ago
|
Updated•2 years ago
|
Updated•1 year ago
|
Description
•