Mbrubeck

The issue allows remote attackers to spoof the user interface via a crafted web page because the `window.fullScreen` object does not properly restrict write access.