dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
2150
share rss forum feed

Mele20
Premium
join:2001-06-05
Hilo, HI
kudos:5

1 recommendation

reply to Name Game

Re: Using the HTML5 Fullscreen API for Phishing Attacks

I got this on Fx10. But I should NOT have since Fx10 ESR has what appears to me to be protective settings in about:config to stop this exploit:

full-screen-api.allow-trusted-requests-only;true
full-screen-api.warning.enabled;true

So, the protective settings are buggy and don't work??? Since they don't seem to work one needs to do this:

full-screen-api.enabled;false
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson