- From: Bo Cupp <notifications@github.com>
- Date: Thu, 19 May 2022 12:10:34 -0700
- To: w3c/clipboard-apis <clipboard-apis@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
- Message-ID: <w3c/clipboard-apis/pull/174/review/979102283@github.com>
@BoCupp-Microsoft commented on this pull request.
> @@ -837,11 +837,11 @@ urlPrefix: https://w3c.github.io/FileAPI/#dfn-; type: dfn;
1. Abort these steps.
- 1. Let |data| be a copy of the [=system clipboard data=] represented as [=clipboard items=]. For the MIME types defined in the [=mandatory data types=] list, |data| contains the sanitized copy of text/plain format.
+ 1. Let |data| be a copy of the [=system clipboard data=] represented as [=clipboard items=]. For the MIME types defined in the [=mandatory data types=] list, |data| contains the content of text/plain format.
Suggest that we change:
>For the MIME types defined in the [=mandatory data types=] list, |data| contains the content of text/plain format.
to
For the MIME types defined in the [=mandatory data types=] list, |data| MAY be sanitized.
>
Issue: Some OSs contain multiple clipboard (e.g. Linux, "primary", "secondary", "selection"). Define from which of those data is read.
- Issue: Add definition of sanitized copy.
+ Issue: Currently Safari does some sanitization. See https://github.com/w3c/clipboard-apis/issues/150.
Not sure if we need this issue if we have agreement on saying data MAY be sanitized above.
> @@ -953,17 +953,9 @@ urlPrefix: https://w3c.github.io/FileAPI/#dfn-; type: dfn;
1. If |type| is not in the [=mandatory data types=] list, then [=reject=] |p| with {{"NotAllowedError"}} {{DOMException}} in |realm| and abort these steps.
- 1. Let |cleanItem| be a sanitized copy of |blob|.
Maybe instead change to be:
1. Let |cleanItem| be an optionally sanitized copy of |blob|
> @@ -953,17 +953,9 @@ urlPrefix: https://w3c.github.io/FileAPI/#dfn-; type: dfn;
1. If |type| is not in the [=mandatory data types=] list, then [=reject=] |p| with {{"NotAllowedError"}} {{DOMException}} in |realm| and abort these steps.
- 1. Let |cleanItem| be a sanitized copy of |blob|.
-
- Issue: Add definition of sanitized copy.
-
- 1. If unable to create a sanitized copy, then follow the below steps:
Maybe change to be:
1. If sanitization was attempted and was not successfully completed, then follow the below steps:
> @@ -1702,19 +1694,9 @@ urlPrefix: https://w3c.github.io/FileAPI/#dfn-; type: dfn;
1. Else
- 1. This is left to the implementation...
-
- Issue: It's not good to leave things up to the
- implementation. What should happen here?
+ 1. Assign "" to |wellKnownFormat|.
This seems like it could be a separate PR as it isn't directly related to allowing an optional sanitization of the well-known formats?
> @@ -786,15 +786,15 @@ urlPrefix: https://w3c.github.io/FileAPI/#dfn-; type: dfn;
1. Abort these steps.
- 1. Let |data| be a copy of the [=system clipboard data=] represented as [=clipboard items=]. For the MIME types defined in the [=mandatory data types=] list, |data| contains the sanitized copy of text/html format, but image/png format has unsanitized payload to preserve meta data.
+ 1. Let |data| be a copy of the [=system clipboard data=] represented as [=clipboard items=]. For the MIME types defined in the [=mandatory data types=] list, |data| contains the content of text/html format, but image/png format has unsanitized payload to preserve meta data.
Suggest that we change the sentence starting with:
> For the MIME types defined...
to
For the MIME types defined in the [=mandatory data types=] list, |data| MAY be sanitized
>
Issue: Some OSs contain multiple clipboard (e.g. Linux, "primary", "secondary", "selection"). Define from which of those data is read.
+ Issue: Currently Safari does some sanitization for [=mandatory data types=]. See https://github.com/w3c/clipboard-apis/issues/150.
Same as I mentioned below... not sure if we need this called out if we are using language that makes it clear sanitization is optional.
--
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/pull/174#pullrequestreview-979102283
You are receiving this because you are subscribed to this thread.
Message ID: <w3c/clipboard-apis/pull/174/review/979102283@github.com>
Received on Thursday, 19 May 2022 19:10:46 UTC