onbeforeunload dialogs are used for two things on the Modern Web:
1. Preventing users from inadvertently losing data.
2. Scamming users.
In an attempt to restrict their use for the latter while not stopping the former, we are going to not display the string provided by the webpage. Instead, we are going to use a generic string.
Firefox already does this (see the attachment).
This does not violate the spec. Per https://html.spec.whatwg.org/#prompt-to-unload-a-document, step 7:
"The prompt shown by the user agent may include the string of the returnValue attribute, or some leading subset thereof. (A user agent may want to truncate the string to 1024 characters for display, for instance.)"
The prompt MAY include the string. We will no longer do so.
|
Screen Shot 2016-02-18 at 2.04.32 PM.png
87.6 KB
View
Download
|
|