Re: [w3c/clipboard-apis] User gesture requirement for Clipboard API access (#52)

Sorry, I forgot to add folks from other UAs to provide feedback. @whsieh , @smaug---- - are you aware of whether Webkit or Gecko might have any opinion on adding a [user interaction](https://html.spec.whatwg.org/multipage/interaction.html#tracking-user-activation) requirement for the Clipboard API? I'm aware that Webkit recently implemented this API, but unsure how it was implemented with respect to user interaction.

Chrome would [like](https://docs.google.com/spreadsheets/d/178S5nBJ7YZY7NLcrJ67qSs03i70VOkLkIA5EsBG8y2M/edit#gid=1590054389) to eventually have this requirement, with a caveat that remote desktop applications may require first implementing a 'clipboardchange' event in order to continue to sync the clipboard. Changing existing behavior may also of course be web incompatible, but this is likely worth the privacy concern of sites potentially being able to snoop on the clipboard without this restriction.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/issues/52#issuecomment-597932196

Received on Wednesday, 11 March 2020 23:36:10 UTC