Broadband Tech > Security > Security > Using the HTML5 Fullscreen API for Phishing Attacks

I got this on Fx10. But I should NOT have since Fx10 ESR has what appears to me to be protective settings in about:config to stop this exploit:

full-screen-api.allow-trusted-requests-only;true
full-screen-api.warning.enabled;true

So, the protective settings are buggy and don't work??? Since they don't seem to work one needs to do this:

full-screen-api.enabled;false
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson