Re: Clipboard API: remove dangerous formats from mandatory data types

I can make a plugins for legitimate text/image editors that would override
default behavior for paste operations to instead execute arbitrary
processes (e.g. recursively delete the entire working directory) unless the
parent application is well sandboxed.

Unless the vendors that establish a lightning fast sanity check for a
subset of binary data types, I really don't believe this is a positive
change.

While we're on it, how about the good ole harbinger of the unknown:
"application/octet-stream"? Where do we reasonably draw the line? Will that
MIME type be blocked? Doesn't seem like there would be any reasonable way
to scrub it.

Sincerely,
   James M. Greene
On Jun 11, 2015 3:14 AM, "Florian Bösch" <pyalot@gmail.com> wrote:

> Oh, also while you're on crippling things, please also exclude copying any
> text that contains "http://:" cause that borks skype.
>

Received on Thursday, 11 June 2015 12:34:27 UTC