2

I believe that Orion should add some sort of notice when the user enters full screen, I know it can be annoying but it prevents phishing attacks that may use the full-screen to fake a login to a page or even the OS, I know that there are entire Windows clones made in Javascript that have a fully working start menu and everything so it would also be safe to assume if somebody had the intentions they could create something similar for macOS, even mimicking the system colors using CSS... Here is an old example of what kind of phishing attack can be done (This is a harmless demonstration and it was created many years ago hence the outdated UI)
https://feross.org/html5-fullscreen-api-attack/

  • Vlad replied to this.

    FluffyKitty776 Not sure how would this work because the attacker would need to know exactly what Orion's interface look like (and every user can have different). Even if the attacker knew it was Orion (and they can't because same UA as Safari).

      I can see that, but at the same time it looks similar enough to Safari that it may (With enough effort) fool users, so a little notification of some sort (Even if it can be disabled) would help.

        No one is typing