Re: Impasse with GNOME bug 675217

[Matthias Clasen <matthias clasen gmail com>]

On Sat, Nov 16, 2013 at 9:20 AM, Alexander E. Patrakov <patrakov gmail com> wrote:

Hello.

You are receiving this message because Michael Catanzaro (who is, if I
understand correctly, a GNOME developer, but not an official developer
of Epiphany, the GNOME web browser) advised me to contact the release
team what to do about the Epiphany browser vulnerability (initially
reported as regular bug #675217, and only long after that was a
malicious testcase constructed). The impasse is that nobody thinks
that this is a bug in his package, nobody is willing to do anything
(because it is someone else's bug or not a bug at all), and thus I
concluded that the bug needs to be escalated.

Hi Alexander,

I can't help but feel that you are on a bit of a crusade here - reporting this single issue in multiple avenues, and even trying to frame it as a security issue. Remember that epiphany is just an app - there's other web browsers out there if this one doesn't suit you...

My own perspective on this issue is that it is an annoying bug, and epiphany could perhaps handle the situation better. It is somewhat similar to allowing web pages to 'go fullscreen' - browsers do that nowadays, but they usually display an overlay that tells the user how to get out. Something similar could perhaps be done for volume control. That being said, I don't know the details of the relevant web standards.

Matthias