Consume User Activation After Entering FullScreen Mode

To prevent a user activation from opening more than one fullscreen window, entering fullscreen will consume the user activation.

Right now fullscreen does not consume the user activation, so a single user activation allows opening as many fullscreen windows as possible. This is counterintuitive. Moreover, Chrome’s current behavior caused a security bug in the past where two different windows would go fullscreen simultaneously, with one of them spoofing browser UI without the user’s knowledge. Even though the exact repro in that bug is suppressed in M72+ by restricted activation visibility of UAv2, it still makes sense to fix the core problem.

Comments

There is a bit of compatibility risk with this change: it may break webpages that request more than one fullscreen for a user activation.

Demo

https://output.jsbin.com/dudakil/

Documentation

none

Status in Chromium

Blink components: Blink

Enabled by default (tracking bug) in:

Chrome for desktop release 76
Chrome for Android release 76
Android WebView release 76

Consensus & Standardization

After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.

Firefox: No public signals
Edge: No public signals
Safari: No public signals
Web Developers: Mixed signals

Owners

Last updated on 2019-06-04