[w3c/editing] [Delayed Clipboard Rendering] Privacy issue while reading data for web custom types (Issue #439)

@annevk commented this on the webkit standard positions repo:

> Since copying is not mediated by the user agent (other than requiring user activation) we have these concerns:
> 
> * Websites could use this to figure out what apps or websites the user is copying data towards.
> * Websites could use this to figure out user habits. This is a lesser concern.
> 
> The first of these could perhaps be remedied by restricting the feature to the "builtin" clipboard types. That would not satisfy [w3c/editing#417 (comment)](https://github.com/w3c/editing/issues/417#issuecomment-1483175559). We're not sure about a solution that does.
> 
> It also seems likely that the website the user copied from is not available for one reason or another. Websites can get OOM'd without notice. This relates to the user habits concern, but is also a practical concern as the feature might not be that useful on certain devices.

@evanstade @inexorabletash @sanketj We want to discuss possible mitigations for this issue.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/editing/issues/439
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/editing/issues/439@github.com>