[Webkit-unassigned] [Bug 164853] [GTK] Handle infinite popup dialogs exploit

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Apr 27 01:43:35 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=164853

--- Comment #18 from ManDay <manday at openmail.cc> ---
(In reply to Claudio Saavedra from comment #17)
> I replied to the wrong part of the comment. I meant to say that dialog needs
> to be modal.

Is it sure that "modal" in this context means that the dialog should be modal w.r.t. the browser? Absent evidence to the contrary I'd say no, because the spec is by nature limited to what _the website_ should do. So anything that is said goes within the realm of each individual website, i.e. the dialog should be modal w.r.t. the website.

That would also agree with my natural feeling about any website being able (or rather, needing not) to have any effect outside of its limited domain (other than perhaps a file chooser dialog).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170427/b5ddfe59/attachment.html>


More information about the webkit-unassigned mailing list