1921500 - display the [Esc ] Notification in Fullscreen window (f11)

Status: RESOLVED DUPLICATE of bug 1867237

(Core :: DOM: Core & HTML, enhancement)

Description

[Umar Farooq [:Puf]]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0

Steps to reproduce:

I Would like to give a Security Improvement for Future Firefox Updates

Steps to Reproduce

1. Shows Attacker Page
2. Instruct User to Keypress (f11) to Open login
3. User keypress (f11) automatically page changes to the entire screen with attacker-controlled Spoofed content with URL Spoof Page.

Actual results:

Because the Fullscreen message is never displayed, the user is not capable to know that they entered Fullscreen, which allows an attacker to spoof the entire screen with attacker-controlled content.

maybe some users know (f11) changes to Fullscreen

Expected results:

1. Display Notification [ To exit full screen, move mouse to top of screen or Press [Esc] ]

2. Adding [ x Exit Fullscreen] in the Firefox contest menu

Note: I will tick on Security category to be kept hidden from Public, you can remove these restrictions if you feel it's not security problem

Comment 1

[Daniel Veditz [:dveditz] out until Nov 10]

See bug 1867237 comment 5