canmove, Confirmed users, Bureaucrats and Sysops emeriti
2,776
edits
Security/Reviews/Mouse-Pointer Lock: Difference between revisions
Security/Reviews/Mouse-Pointer Lock (view source)
Revision as of 19:30, 26 February 2013
, 26 February 2013no edit summary
No edit summary |
No edit summary |
||
| Line 7: | Line 7: | ||
</bugzilla> | </bugzilla> | ||
}} | }} | ||
{{SecReview | |||
|SecReview feature goal= | |||
* Allow pointer lock when not in full screen mode ( https://bugzilla.mozilla.org/show_bug.cgi?id=822654 and https://wiki.mozilla.org/Security/Reviews/Mouse-Pointer_Lock ) | * Allow pointer lock when not in full screen mode ( https://bugzilla.mozilla.org/show_bug.cgi?id=822654 and https://wiki.mozilla.org/Security/Reviews/Mouse-Pointer_Lock ) | ||
* Current plan: in response to a click, a web page may activate a doorhanger "Do you want to allow this site to go into pointer-lock mode?" | * Current plan: in response to a click, a web page may activate a doorhanger "Do you want to allow this site to go into pointer-lock mode?" | ||
** Note that pointer lock comes free with full-screen. Full-screen asks for forgiveness while pointer-lock-alone asks for permission. | ** Note that pointer lock comes free with full-screen. Full-screen asks for forgiveness while pointer-lock-alone asks for permission. | ||
* Keeping the existing model for pointer lock during full-screen. | * Keeping the existing model for pointer lock during full-screen. | ||
|SecReview alt solutions= | |||
== | |SecReview solution chosen= | ||
* How do we communicate the question of whether to allow pointer lock? The phrase "pointer lock" doesn't really convey the concept, even to users who have seen games use it. | |SecReview threat brainstorming=* How do we communicate the question of whether to allow pointer lock? The phrase "pointer lock" doesn't really convey the concept, even to users who have seen games use it. | ||
** Chrome says "Disable your mouse cursor" | ** Chrome says "Disable your mouse cursor" | ||
** "Use your mouse to control something other than your cursor" | ** "Use your mouse to control something other than your cursor" | ||