Re: [w3c/clipboard-apis] Make async clipboard APIs (read/write) to sanitize interoperably with setData/getData for text/html (#150)

A key feature of sanitization WebKit implements is stripping invisible contents and converting CSS rules to inline styles. Stripping invisible contents is important to avoid pasting privacy sensitive information such as user's home directory path (e.g. may contain the user name of the local computer, or even full mailing address in the case of some Microsoft Office application users). Converting CSS rules to inline style is important so that the pasted content won't adversely affect the rest of the document. We had to preserve some Microsoft Word's list item annotations in order to support TinyMCE's converter code but we consider that to be more of a quirk that we want to get rid of in the long term; e.g. by handling the list item annotations ourselves.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/issues/150#issuecomment-973293309