Re: risks of custom clipboard types

Le 17 mai 2011 à 20:05, Ryosuke Niwa a écrit :

> So file-flavour is something special that should be always filtered??
> (in DnD or in CnP), which should be warned against in the spec?
> 
> Ryosuke, can you confirm this is the only risk you were talking about?
> 
> No.  There are some applications that embed sensitive information such as local file path and user name inside a content put into clipboard without notifying the user.  As far as I'm concerned, giving websites access to such information is not acceptable.
> 

Please be more precise with "some applications".

There could be some applications that put the email of the user (or the sender of the mail being read) in the plain text variant without the user knowing!

paul

Received on Tuesday, 17 May 2011 18:08:48 UTC