Comment 1 for bug 370248

I think this bug report is invalid. For several years Web browsers have insisted on showing the address bar, or the status bar, or both, in any popup window as a way of distinguishing it from native application windows. Can you provide a demo which avoids this security measure?

If it was possible to fake the gksudo window in this way it would also be possible to fake the PolicyKit dialog, or Seahorse's Change Password dialog, or the password dialogs from Evolution or Thunderbird or Pidgin or any other program that uses passwords, in exactly the same way. So the problem would still need to be fixed in the Web browser.