On Sat, Aug 7, 2010 at 1:39 AM, Mike Wilcox <span dir="ltr"><<a href="mailto:mike@mikewilcox.net">mike@mikewilcox.net</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Kudos to Mozilla (and Robert?). This is awesome. It does appear that you plan to allow fullscreen without the use of a user-trigggered event such as a button-click like Flash does.</blockquote><div><br>The proposed spec allows that, but I think browsers are likely to prevent "drive-by fullscreen".<br>
<br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">First a small thing. The format of the CSS style:<br>
:full-screen<br>
:full-screen-root-with-target<br>
I don't see why "fullscreen" should be hyphenated. Even the title of the page uses it as one word.<br></blockquote><div><br>I could go either way, but "full-screen" technically more correct. BTW you seem to be reading an old version of the spec.<br>
<br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I don't understand the use of requestFullScreenWithKeys(). Why would I ever use a more restrictive method? </blockquote><div><br>As the spec explains, by opting into more restrictions, you can get a lower bar to access fullscreen mode.<br>
</div><div> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I assume the entire reason for security is for third party apps (video) and advertisements (have I missed an actor?).<br></blockquote><div><br>There's a set of problems there, but there's another set of problems where the user simply visits <a href="http://evil.com">evil.com</a> and that site tries to go fullscreen to launch some kind of spoofing attack.<br>
<br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
The first, simple use case I'm looking to solve is to block your ads from using fullscreen. I don't see a way to do that in the spec. I recommend the above options are properties of the document.body:<br>
<body allowFullscreen="blocked"><br></blockquote><div><br>This kind of thing would be better expressed with CSP.<br> </div>Rob<br></div>-- <br>"Now the Bereans were of more noble character than the
Thessalonians, for they received the message with great eagerness and
examined the Scriptures every day to see if what Paul said was true." [Acts 17:11]<br>