delay showing permission popups (e.g Location) till input element is not selected/focused && 0 keystrokes in the last few seconds
Reported by
wesam.we...@gmail.com,
Jun 26 2018
|
||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3469.3 Safari/537.36 Steps to reproduce the problem: 1. visit a website that has a input box (preferably already auto focused on load) and that asks for permissions e.g Alibaba.com and Google.com 2. start typing What is the expected behavior? not to interrupt input and steal focus. and not to accept a return press as a confirmation to the permission popup, even if the allow button is focused. What went wrong? focus from input box/element was stolen by the popup, that's not a good user experience that User Agents need to fix. probably if I kept typing or hit return it would have accidentally confirmed access to the permission. Did this work before? N/A Chrome version: 69.0.3469.3 Channel: n/a OS Version: 10.0 Flash Version: I didn't encounter (because I was aware and quick enough to stop typing) or test the security issue. nonetheless I'm at least initially labeling it as security just to be safe.
,
Jun 26 2018
Not a popup issue, the "popups" described are permission prompts. Permission team, are you working on detecting permission prompt misclicks and attempts by pages to trick users into accepting permissions?
,
Jun 26 2018
,
Jun 26 2018
,
Jul 17
Unable to reproduce the issue on reported chrome version 69.0.3469.3 using Windows 10. Attaching screen-cast for reference. Steps: --------- 1. Launched reported chrome 2. Navigated to given URL " Alibaba.com " and other as per screen-cast As we are able see the popup and also we are able to type in input box. @Reporter: Could you please review the attached screen-cast and confirm if anything being missed here. Thanks..!
,
Jul 27
thanks, that's odd my memory might be failing me because I remember the prompt blocked my (keyboard) input.
,
Jul 27
Thank you for providing more feedback. Adding the requester to the cc list. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 30
@Reporter:As per comment #6, Could you please let us know if the issue is resolved/not. Adding Needs-Feedback label to it. Thanks..!
,
Nov 5
I'm unable to reproduce either, so I'm leaning on it being already fixed. Please re-open if issue still persists. |
||||||||
►
Sign in to add a comment |
||||||||
Comment 1 by infe...@chromium.org
, Jun 26 2018Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug