Re: [w3c/clipboard-apis] Active malicious PasteJacking exploits in-the-wild affecting user security owing to lack of sufficient consideration to identified and other security concerns (#142)

I thought of a compromise, in the (unlikely?) event that anyone actually might still want paste-buffer smashing:  relegate the altered version into a NON DEFAULT option of its own (e.g. right-click, and "copy" - works as expected - no alterations/addition, or right-click and "copy-suggested" (or some similar name) so that if a user actually wants to get something different to what they marked, they still have the option to explicitly request that (and therefore will be aware it took place - and the risks involved).

It might also be a good idea to warn them when they use this feature, such as:
a) pop up a message like "beware that malicious content might have been copied to your clipboard.  Take precautions before pasting this content"
b) show an interim window with a similar warning above, showing the user what has actually been copied

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/issues/142#issuecomment-844644714