Re: [w3c/clipboard-apis] Maybe allow content from same origin to be pasted without extra permission requirement (#98)

Yeah, we've definitely considered this in past. One issue with this proposal is that it leaks the information about if and when the user has content from other app or other origin in the system clipboard.

For example, you can copy some content then continuously try to paste. As long as the paste succeeds, you know the user had not copied anything else in the system or in other origins, and as soon as the paste fails / requires a permission, the user had copied some content elsewhere.

Perhaps this risk can be mitigated if we limited to only under user gesture. This is kind of necessary anyway because it would be bad / crappy user experience to let website trigger a copy but not let the user paste it anywhere else but the website itself.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/issues/98#issuecomment-529746418