From d8177a8f3ba6cc6e80d27a7c6bdd1b5920e12544 Mon Sep 17 00:00:00 2001 From: Giovanni Campagna Date: Mon, 12 Aug 2013 15:14:37 +0200 Subject: [PATCH] ScreenShield: don't allow events through the lock dialog Make the lock dialog group reactive, to intercept any events before they go to the actors below. In the future, we may restructure our chrome to have a clear layer system, but for now it fixes a security issue in the lock screen (you can see the contents of the windows by dragging if the screen was locked with the overview active) https://bugzilla.gnome.org/show_bug.cgi?id=705840 --- js/ui/screenShield.js | 1 + 1 file changed, 1 insertion(+) diff --git a/js/ui/screenShield.js b/js/ui/screenShield.js index 4264f01b7..8452bc60c 100644 --- a/js/ui/screenShield.js +++ b/js/ui/screenShield.js @@ -478,6 +478,7 @@ const ScreenShield = new Lang.Class({ this._lockDialogGroup = new St.Widget({ x_expand: true, y_expand: true, + reactive: true, opacity: 0, pivot_point: new Clutter.Point({ x: 0.5, y: 0.5 }), name: 'lockDialogGroup' });