We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
| Assigner | mozilla |
| Reserved | 2024-07-09 |
| Published | 2024-07-09 |
| Updated | 2024-09-12 |
It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `<select>` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.
Leaving pointerlock by pressing the escape key could be prevented
Irvan Kurniawan
https://bugzilla.mozilla.org/show_bug.cgi?id=1694513
https://www.mozilla.org/security/advisories/mfsa2024-29/
https://www.mozilla.org/security/advisories/mfsa2024-32/
