[Touch-packages] [Bug 1611874] Re: JS alerts shouldn't be able to take over the screen

2017-02-07 Thread Olivier Tilloy
« Always show the OK button at the bottom, outside of the Flickable. » That sounds like the correct fix. From a quick look at the UITK documentation, there's no obvious way of putting the button outside the default flickable, but that can probably be worked around. ** Changed in: webbrowser-app

[Touch-packages] [Bug 1611874] Re: JS alerts shouldn't be able to take over the screen

2016-08-11 Thread Michael Terry
It seems to be that they've added a lot of newlines to the end of the alert message, scrolling the button below the screen. Here's an attached example file. Turns out, the OK button is actually at the bottom of all that whitespace. But a malicious user can just add miles and miles of

[Touch-packages] [Bug 1611874] Re: JS alerts shouldn't be able to take over the screen

2016-08-11 Thread Michael Terry
(Trimming whitespace obviously wouldn't prevent malicious sites, since they can just put a period at the end or whatever. But just seemed like sensible cleanup in case of accidental newlines.) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which

[Touch-packages] [Bug 1611874] Re: JS alerts shouldn't be able to take over the screen

2016-08-11 Thread Michael Terry
(oh, did you visit youbute.com on your desktop? Yeah it's a different site then -- like I said originally, visit it on your phone) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu.

[Touch-packages] [Bug 1611874] Re: JS alerts shouldn't be able to take over the screen

2016-08-11 Thread Olivier Tilloy
I’m not getting the javascript alert. The type of scam the user is getting might be dependent on geoip/locale settings. When browsing to youbute.com, I’m redirected first to sarah.dntrx.com and then to videoadblocker.net. Could you please paste a screenshot of the javascript alert you’re getting,