#31951: Disable "Full-screen browsing" by default on Android --------------------------------------+-------------------------- Reporter: sysrqb | Owner: tbb-team Type: defect | Status: new Priority: Medium | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Resolution: Keywords: tbb-mobile | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: --------------------------------------+--------------------------
Comment (by Thorin): I'm not sure if you already do this for Android, but I would be more concerned with the FS API (`full-screen-api.enabled`). Even though it requires a user-gesture (it wouldn't be hard to cover the entire window in an element), I see this as a far more feasible attack to mimic chrome than trying to detect the toolbar display and replacing/removing-the-spoof as required. The lag would give it away - you'd see two toolbars (especially as you scroll really slowly: try it). Unless I'm missing something? -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31951#comment:1> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs