Re: Re Location bar Proposal 1.2

On Mar 18, 9:15 pm, Tony Mechelynck
<antoine.mechely...belgacom.net>
wrote:
> Nelson Bolyard wrote:
> > I think this whole idea has merit PROVIDED (if and
only if) the
> > chrome at the top of the window (including the
address bar) is made
> > non-optional.
>
> I don't see why. Let's say some user decides not to
display the Navigation
> Toolbar (which includes the address bar), or even
relegates the address bar to
> the reserve of non-displayed customizable elements.
Then any web page trying
> to spoof part of that non-displayed chrome immediately
betrays itself as phony.

The problem is the user isn't trying to hide the navigation
toolbar on
purpose. The popup can choose if the toolbars are displayed.
The way
this phishing example works is a popup is opened with no
toolbar in
the chrome and in the content of the page, a fake toolbar is
shown.

That's why Nelson is suggesting the location bar is made
non-optional.

At least make it non-optional for new windows. Users who
choose not to
have a location bar will always "not have a location
bar". Users who
choose to have it (by default) will always see it unless
s/he
explicitly removes it.

Ed

_______________________________________________
dev-apps-firefox mailing list
dev-apps-firefoxlists.mozilla.org
h
ttps://lists.mozilla.org/listinfo/dev-apps-firefox