Re: [w3c/editing] Security Review (#315)

> We have a separate issue to discuss this to make it more explicit: w3c/clipboard-apis#52

The separate issue you linked discusses a user gesture requirement for the Clipboard API overall. I suspect that Chrome Security may prefer for all new clipboard API surface to require user gesture, but that we unfortunately may not be able to add the user gesture requirement for existing API surface without a separate launch/effort, as this change is web-incompatible (may break existing sites, without a corresponding replacement to get the same functionality). Therefore, I think it's still worth having pickling require user gesture, but not the underlying Clipboard API in the meantime.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/editing/issues/315#issuecomment-880219558