5 ms·
Isn't this like a huge security risk?
by jumpwah 11y ago
Isn't this like a huge security risk?
- mrec 11y agoWhy? Copy FROM clipboard would be, sure. Copy TO clipboard... OK, I can come up with scenarios where it'd be a problem, but they're pretty far-fetched.
- gsnedders 11y agoRun a timer overwriting your clipboard every 10ms. Prevent you from copying anything off a webpage and instead replacing it with a copyright notice. Etc., etc., etc.
- realityking 11y agoThere's a permission prompt for first use and I think Mozilla considers making it https only.
- cpeterso 11y agoFlash has offered these same clipboard APIs for years and these clipboard "attacks" have never been a problem before. I don't see how replacing Flash clipboard APIs with HTML clipboard APIs will change web developers' behavior.
- Crito 11y agoWell there are attacks in the vein of this: https://thejh.net/misc/website-terminal-copy-paste https://thejh.net/misc/website-terminal-copy-paste