255256 - disallow context menus script setting thing by default

Status: RESOLVED WONTFIX

(Firefox :: General, defect)

Description

[Asa Dotzler [:asa]]

We should set the pref by default so sites can't hijack the context menu. If
whoever is in there doing that would like to make me happy, they could also make
that window resizeable.

Comment 1

[Asa Dotzler [:asa]]

(and maybe we should also just disable raising and lowering of windows and
moving or resizing existing windows too. all of this should help to prevent
spoofing)

Comment 2

[Jesse Ruderman]

Some more annoyances that should be disabled by default:
Bug 186708 resizing windows that have toolbars
Bug 177838 creating non-resizable windows

Comment 3

[Víctor Fernández]

I agree. That option should be set by default.

Comment 4

[:Gavin Sharp [email: [e-mail]]]

Attachment: Patch

Asa, do you want to drive this in?

Comment 5

[Mike Connor [:mconnor]]

Comment on attachment 180425 [details] [diff] [review]
Patch

This'll have unexpected behaviour with the new prefwindow code.  Disable common
annoyances would then do nothing with this pref, then set it back.  Not
acceptable behaviour.

Jesse, you had something written up about disabling some of these by default
and removing that poorly defined checkbox, care to share?

Comment 6

[:Gavin Sharp [email: [e-mail]]]

(In reply to comment #5)
> This'll have unexpected behaviour with the new prefwindow code.  Disable common
> annoyances would then do nothing with this pref, then set it back.  Not
> acceptable behaviour.

I think it should be noted that the new pref window already does this for some
other prefs (bug 284079). That doesn't make this the right fix, of course, but
it emphasizes the need for a better general solution.

Comment 7

[:Gavin Sharp [email: [e-mail]]]

Comment on attachment 180425 [details] [diff] [review]
Patch

This should work now that the prefs UI was redone.

Comment 8

[:Gavin Sharp [email: [e-mail]]]

See bug 299424 comment 7.

Comment 9

[Martijn Wargers (dead)]

So the patch can now be reviewed again?

Comment 10

[Jared Wein [:jaws] (please needinfo? me)]

Many sites now depend on this behavior, for example Google Docs provides their own context menu that is specific to the workflow/actions of the application. Changing this will break those sites.