I always thought drawing over the content area is a no-no, because then anybody can fake that dialog via html/css and make it do something completely different.