Tor permits web sites to maximize window
I can't pinpoint exactly which web site is doing it, but when I start the Tor browser with "restore tabs from last session" enabled, it will often maximize the window and then give a warning saying not to maximize the window. I'm not, and Tor browser should not allow web sites to do so either.
Reproduction steps:
- Enable "restore tabs from last session".
- Find a web site which maximizes the window using e.g. JavaScript and enable javascript permanently for that site.
- Close and reopen Tor Browser.
Expected results: Tor should prevent window maximize operations as it is a potential security risk.
Actual results: Tor allows window maximize operations.
Trac:
Username: oiafwej
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information