To reproduce the bug try the followings steps: 1) download the latest version of windows_js, extract his contents into a folder, the go to the subfolder samples and create a new file called 'mysample.html' 2) put inside the file 'mysample.html' the following lines:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd";> <html xmlns="http://www.w3.org/1999/xhtml"; version="-//W3C//DTD XHTML 1.1//EN" xml:lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <title>Test</title> <script type="text/javascript" src="../javascripts/prototype.js"> </script> <script type="text/javascript" src="../javascripts/effects.js"> </script> <script type="text/javascript" src="../javascripts/window.js"> </script> <link href="../themes/default.css" rel="stylesheet" type="text/css"></link> </head> <body> <script> win = new Window('myDialog', { title: "Let's Google", width:600, height:600, resizable: true, minimizable: false, url: "http://www.google.com/";, showEffectOptions: {duration:1}}) win.show(true); win.setDestroyOnClose(); </script> </body> </html> 3) save and open your favorite browser (i try with FF2, IE6 and IE7), resize the browser main window to be smaller than fullscreen 4) no open 'mysample.html'; you should see a small modal window inside your browser main window; this modal window contains the google main page, while the rest of the browser window is grey, because of the shield created to emulate modal behaviour; 5) now try to maximize your browser main window You should now see that the grey "shield" (aka "overlay_modal" DIV) not covers all the client area of your window, leaving uncovered the left and the bottom regions. This trick could be used by someone to break modal protection and to have access to the page in background. Last note: if you use 'win.showCenter' instead of 'win.show' everything works fine (but the inside dialog is moved to follow the screen coordinates when you resize the browser window). _______________________________________________ Javawin mailing list [email protected] http://mail.xilinus.com/mailman/listinfo/javawin_xilinus.com
