[dolmen]

OK, but pasting should be triggered by an user action.

Aside from Clipboard managers (which should be handled like on screen keyboard or other alternative input methods) I don't see a reason to allow pasting (and so reading from the clipboard) from an window that doesn't have the input focus.

[edave64]

That's a good step, but I think in most windowing systems, windows can just take and give focus as they please, so that alone probably wouldn't be too effective.

It's probably a possible problem to solve, but fixing stuff that wasn't build with security in mind from ground up is always tediuos.