This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 29580 - MouseEvent.screen{X,Y} leaks window location
Summary: MouseEvent.screen{X,Y} leaks window location
Status: RESOLVED FIXED
Alias: None
Product: CSS
Classification: Unclassified
Component: CSSOM View (show other bugs)
Version: unspecified
Hardware: PC All
: P2 normal
Target Milestone: ---
Assignee: Simon Pieters
QA Contact: public-css-bugzilla
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-20 03:48 UTC by Chris Rebert
Modified: 2016-08-25 12:23 UTC (History)
0 users

See Also:

Attachments

Description Chris Rebert 2016-04-20 03:48:07 UTC 
https://drafts.csswg.org/cssom-view/#dom-mouseevent-screenx

[[
The screenX attribute must return the x-coordinate of the position where the event occurred relative to the origin of the screen.

The screenY attribute must return the y-coordinate of the position where the event occurred relative to the origin of the screen.
]]

The concern here is similar to Bug 29577. Webpages shouldn't be able to infer the location of their window on my screen by computing the difference between coordinate system origin points.
The spec should permit privacy-conscious browsers to (consistently) replace the "screen" coordinate system with the "viewport" (or "window"?) coordinate system, thus pretending the browser is always full-screen.