I think what I've heard from application developers over and over again is that, while the UA may provide some way to go into full screen from in the browser chrome, it is much more discoverable when that capability exists from within the content area (e.g. people are used to clicking on the full screen button in YouTube, and when you take that away users can no longer figure out how to go full screen).<div>
<br></div><div>Obviously there are security considerations re: UI spoofing, but I'm beginning to wonder how much we should beat ourselves over this. If there are simple things that we can do to improve upon the model Flash uses (e.g. don't have a translucent overlay but instead use an opaque overlay, or use an overlay that doesn't go away until the user dismisses it, etc) without totally killing current use cases and discoverability, then let's consider that. Overall though, it feels like we are burying our head in the sand a bit by saying "Well, as long as HTML doesn't provide a way to go full screen, the users are safe and it's not *our* fault if anything bad happens," when the reality is that Flash is installed on 98-99% of all machines out there and anyone who is really trying to phish people using this method could easily use flash instead of whatever we provide. (And yes I'm aware people can turn off flash, but those users sophisticated enough to use noflash can probably figure out if they are in full-screen mode or not.)</div>
<div><br></div><div>-Ian<br><br><div class="gmail_quote">2009/12/16 Ian Hickson <span dir="ltr"><<a href="mailto:ian@hixie.ch">ian@hixie.ch</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Wed, 16 Dec 2009, Michael Dale wrote:<br>
><br>
> It would be really nice if the html5 spec supported a javascript call to<br>
> set a target window to fullscreen. The browser would then issue a<br>
> security warning at the top of the page (similar to pop-ups) and then<br>
> the user could grant that domain permission to go full-screen.<br>
<br>
</div>Why would that be better than the user just telling the UA to make the<br>
page full-screen directly?<br>
<font color="#888888"><br>
--<br>
Ian Hickson U+1047E )\._.,--....,'``. fL<br>
<a href="http://ln.hixie.ch/" target="_blank">http://ln.hixie.ch/</a> U+263A /, _.. \ _\ ;`._ ,.<br>
Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'<br>
</font></blockquote></div><br></div>