Sign in with
Sign up | Sign in

Mozilla Developing Secure Full-Screen Firefox Feature

By - Source: Mozilla | B 16 comments

Mozilla's Robert O'Callahan said that the company is currently working on a full-screen implementation for web apps in Firefox.

However, O'Callahan said that Mozilla is concerned about security issues, for example about the fact that a user will not see the URL of a service in full-screen mode.

The engineer suggested that Mozilla could go different routes to make full-screen scenarios more secure, for example by enabling full-screen modes only through a manual user request and providing a pop-up window.

"We can make sure that when going full-screen, we display a clear message describing how to leave full-screen - like Flash does, but hopefully better, O'Callahan wrote. "Then if a malicious page goes full-screen when the user didn't want to, the user will probably exit full-screen immediately."

More problematic are spoofing attacks that occur when a full-screen window is already opened. However, O'Callahan says that "most spoofing attacks require user input that the browser can detect" in which cases the URL bar could be shown. But even there appear to be issues, as especially games are designed to be in full-screen mode all the time "while receiving the full range of user input."

Mozilla does not have a solution for this problem and is asking security researchers for feedback.

Display 16 Comments.
This thread is closed for comments
Top Comments
  • 13 Hide
    Anonymous , August 17, 2011 7:08 PM
    And now we move the URL box 1 pixel to the left ... OMG FIREFOX 7
  • 11 Hide
    stm1185 , August 17, 2011 6:45 PM
    HansVonOhainAnd this feature will be on firefox 9.


    So by Nov then, sweet!
Other Comments
  • 3 Hide
    HansVonOhain , August 17, 2011 6:23 PM
    And this feature will be on firefox 9.
  • 11 Hide
    stm1185 , August 17, 2011 6:45 PM
    HansVonOhainAnd this feature will be on firefox 9.


    So by Nov then, sweet!
  • 0 Hide
    amigafan , August 17, 2011 6:52 PM
    I see Tom's just like Mozilla started with scheme of lots of minor and actually unimportant stuff released extremely often.
  • 1 Hide
    KonstantinDK , August 17, 2011 6:55 PM
    Just make sure you can close it with ESC. And make sure every one knows that (display a tip when move mouse to the side of screen)
  • 13 Hide
    Anonymous , August 17, 2011 7:08 PM
    And now we move the URL box 1 pixel to the left ... OMG FIREFOX 7
  • -1 Hide
    aaron88_7 , August 17, 2011 7:28 PM
    Call me old fashioned but I like toolbars, menus, and browser skins. I have a 23" monitor, I don't need a full screen browser. After all, it's just a f-ing web browser. Most websites still aren't even optimized for widescreen so I don't know what they think people are missing out on.

    Next thing they'll be making their browsers compatible with triple monitor displays....
  • 2 Hide
    DSpider , August 17, 2011 7:29 PM
    Man, hackers will have a blast if they can get a fullscreen HTML5 portal to look like Windows XP (7 hasn't caught on yet for the majority of middle-aged men and women).

    Haha. I remember I sent a screenshot to one of my mom's co-workers a few years back and she didn't know how to close it. Hahahahahaha. She said she kept clicking the red X button from the picture for a minute or so. Omg... And I even had the silver theme on... I hope I don't EVER get like this when I'm old. Damn.
  • 1 Hide
    JasonAkkerman , August 17, 2011 7:57 PM
    Full screen??? hmmm F11 anyone?
  • 0 Hide
    jacobdrj , August 17, 2011 9:32 PM
    What makes this secure?

    Full screen is awesome on my netbook, FYI...
  • 0 Hide
    brandonjclark , August 18, 2011 1:27 AM
    Hmm, I've got seven tabs open right now and am using around 192mb. Sure, that's a lot for certain. But still, don't double the figure dude....

    Also, I see this as a bad thing. It sounds like it could be hijacked and then the user would think they were connecting to a site but it could then be spoofed.
  • -1 Hide
    Archean , August 18, 2011 5:21 AM
    @otacon
    +1 on memory hog argument. But 412 MB for seems to high to me, with 9 tabs opened right now FF6 is 296MB here.
  • 0 Hide
    alidan , August 18, 2011 5:31 AM
    full screen is over rated.

    also, ctrl+ about 3-4 times, its how i get websites to look good at 1920x1200 (full screen, not f11 full screen)
  • 0 Hide
    Anonymous , August 18, 2011 5:45 AM
    Sad.
  • -1 Hide
    eddieroolz , August 18, 2011 6:10 AM
    Simple. Allocate 20px at the top and constantly display the URL against a white background.

    They couldn't think of this?
  • 0 Hide
    mitch074 , August 18, 2011 10:52 AM
    Firefox 7 should reduce memory use by more or less 50% over Fx 6 - so chill, or switch to beta channel right now.
  • 0 Hide
    jsanthara , August 18, 2011 8:32 PM
    mitch074Firefox 7 should reduce memory use by more or less 50% over Fx 6 - so chill, or switch to beta channel right now.


    That would be great. I just started beta testing 7 a few hours ago, I hope to see improvements.