Re: [w3c/clipboard-apis] clarify the issue prompting the suggestion of transcoding images? (#139)

I think the envisioned attack would be that of sites trying to write malicious images with known decoder (ex. libpng, etc) vulnerabilities, with the goal of attacking out-of-date decoders in installed native applications that try to read these images (when the user pastes them into those apps). 

Browser implementations transcoding with a safe, up-to-date version of relevant image encoders ensures that native applications cannot be attacked by malicious images from the web.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/issues/139#issuecomment-809673670