Usability vs. Security

The Wayland team doesn’t like the idea of “warping” the mouse cursor (moving it to another position on the screen programmatically).

An unprivileged application being able to move the cursor over another application is something I would consider a security vulnerability.

DemiMarie on merge request #337

Blender team found a workaround for Xwayland.

The issue is that the cursor cannot be warped as long as it is visible. The way things work currently is, if a cursor is hidden and it is warped, we lie to X11 clients and say it is actually warped. While doing so, we lock the pointer via the available Wayland protocols. When the cursor is made visible or that for some other reason the lock is broken (for example the user Alt-tab:ed away), we stop lying and where the visible cursor is displayed is the position we tell the clients about. This works for the majority of use cases we have run into.

jadahl on issue #551561

SDL team spotted it and pulled it into the library.

Blender, that also uses SDL2 can warp. After some investigation, I found how they fixed it.

mzivic7 on issue #9539

GNOME team’s opinion: Bad developers. How dare you fix real usability issues.

You’re showing really good examples of things we want to avoid.

swick on issue #4301

This is software development, people.

Leave a Reply

Your email address will not be published. Required fields are marked *