Re: [w3c/editing] [Delayed Clipboard Rendering] Privacy issue while reading data for web custom types (Issue #439)

There's a fundamental issue with custom formats in that they cannot be sanitized and thus allow for exfiltration of data the end user might not expect across applications.

I think the timeout was proposed to address a separate issue, but that does not seem like a great solution as the end user will now have this latency inflicted upon them.

Only supporting this for built-in formats as resolved seems like a reasonable way forward.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/editing/issues/439#issuecomment-1935691806
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/editing/issues/439/1935691806@github.com>

Received on Friday, 9 February 2024 10:39:48 UTC