mirror of
https://github.com/roytam1/UXP.git
synced 2026-05-26 14:54:25 +00:00
[Basilisk] Prevent form popups from crossing the "line of death".
Without this, doorhangers could potentially be spoofed to overlap legitimate permission popups like geolocation or plugin permissions. Another reason doorhangers are evil!
This commit is contained in:
@@ -124,7 +124,7 @@ var FormValidationHandler =
|
||||
let tabBrowser = aWindow.gBrowser;
|
||||
this._anchor = tabBrowser.popupAnchor;
|
||||
this._anchor.left = aPanelData.contentRect.left;
|
||||
this._anchor.top = aPanelData.contentRect.top;
|
||||
this._anchor.top = Math.max(0, aPanelData.contentRect.top);
|
||||
this._anchor.width = aPanelData.contentRect.width;
|
||||
this._anchor.height = aPanelData.contentRect.height;
|
||||
this._anchor.hidden = false;
|
||||
|
||||
Reference in New Issue
Block a user