Windows users cannot tell whether the dismiss/close button created by `requireInteraction` is from user agent or from webpage

[saschanaz]

What is the issue with the Notifications API Standard?

Windows has a requirement that a non-autoclosing notification must have an action button. Both Firefox and Chrome currently work around this by implicitly adding a dismiss/close button that just closes the notification.

But this can confuse users as nothing tells the user that this "Close" button is only going to close notification or trigger an action. This makes a difference because a pure close button would only silently close the notification when the browser is closed, whereas an action button would kickstart the browser.

Malicious actors may abuse this by registering an action button that's named "Close" but actually triggers an advertisement popup, for example.