Hacker News new | ask | show | jobs
by jumpwah 3988 days ago
Isn't this like a huge security risk?
1 comments

Why? Copy FROM clipboard would be, sure. Copy TO clipboard... OK, I can come up with scenarios where it'd be a problem, but they're pretty far-fetched.
Well there are attacks in the vein of this: https://thejh.net/misc/website-terminal-copy-paste
Run a timer overwriting your clipboard every 10ms. Prevent you from copying anything off a webpage and instead replacing it with a copyright notice. Etc., etc., etc.
Flash has offered these same clipboard APIs for years and these clipboard "attacks" have never been a problem before. I don't see how replacing Flash clipboard APIs with HTML clipboard APIs will change web developers' behavior.
There's a permission prompt for first use and I think Mozilla considers making it https only.