Re: [w3c/clipboard-apis] Arbitrary clipboard types (Issue #165)

> > WebKit would not support arbitrary types across origins? What is the concern there given it's opt-in from all sides?
> 
> So in shipping Safari, our DataTransfer APIs don't allow for cross-origin transfer of custom data types, since this could be abused as a potential tracking mechanism. With the async clipboard API, we currently uphold these same rules for the same reasons (as well as consistency with the legacy API).

@whsieh For cross-origin copy/paste using DataTransfer APIs, Safari only allows to read sanitized HTML from the standard html format -- Apart from what Ryosuke described in [this ](https://github.com/w3c/clipboard-apis/issues/150#issuecomment-973293309)comment, are there any other reasons as to why this approach was chosen by Safari?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/clipboard-apis/issues/165#issuecomment-1504160970
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/clipboard-apis/issues/165/1504160970@github.com>

Received on Tuesday, 11 April 2023 21:56:16 UTC