Chameleon Logo Chameleon
Security 7 min read • 2026-09-17

How Online Coding Portals Enforce Fullscreen Mode and How Desktop Overlays Stay Active

Technical analysis of the HTML5 Fullscreen API (requestFullscreen). Learn how assessment portals enforce fullscreen lockouts and how desktop HUDs maintain Always-on-Top priority.

C
Chameleon Security Team VERIFIED

Many online assessment platforms mandate that candidates click a "Enter Fullscreen Mode" button before questions are revealed. Understanding how the HTML5 Fullscreen API operates reveals why native desktop overlays remain completely functional.

The HTML5 Fullscreen API & fullscreenchange Listeners

Web portals call element.requestFullscreen() to expand the web viewport across the monitor, registering listeners on fullscreenchange to flag when candidates exit.

Why Fullscreen Web Pages Cannot Suppress Native Desktop Windows

A fullscreen web page is merely an ordinary browser window sized to monitor dimensions. It exists at standard application window levels.

Managing OS Window Z-Order & NSWindowLevel Schemes

Chameleon elevates its window priority to NSFloatingWindowLevel (macOS) or HWND_TOPMOST (Windows), anchoring it above the fullscreen browser canvas.

Click-Through Mode: Interacting with Fullscreen IDEs Smoothly

By toggling Click-Through mode, you can type directly into the fullscreen web editor underneath Chameleon while viewing AI guidance overhead without losing focus.

Frequently Asked Questions

Can a website detect that a desktop application is floating above it?
No. The web browser only knows if its own document is fullscreen. It has no API access to audit desktop z-order layers managed by the OS WindowServer/DWM.
What happens if I accidentally click the overlay while in fullscreen mode?
With Chameleon's Click-Through mode enabled, mouse clicks pass directly through to the underlying web page, maintaining web browser focus.