W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2014

Re: [clipboard] Semi-Trusted Events Alternative

From: James M. Greene <james.m.greene@gmail.com>
Date: Mon, 15 Sep 2014 11:29:20 -0500
Message-ID: <CALrbKZhApHe5nr7Zqihdv+-Cke68NJ-M=+FiO9vrrAwqhhZQBA@mail.gmail.com>
To: Dale Harvey <dale@arandomurl.com>
Cc: Jonas Sicking <jonas@sicking.cc>, "Hallvord R. M. Steen" <hsteen@mozilla.com>, Ben Peters <Ben.Peters@microsoft.com>, Perry Smith <pedzsan@gmail.com>, Webapps WG <public-webapps@w3.org>
> websites can already trivially build editors that use copy and
> paste within the site itself

If that is true (I haven't done much work with web-based rich editors),
then I think that may have actually been Jonas's point: let's ensure that
same-origin clipboard operations are fully supported as they are in the
most modern browsers today. To ensure that remains true and/or is added in
browsers that may not currently support that notion 100%, we need to ensure
that the spec calls that out and also complies with or modifies other
related specs' contents. For example, the Editing spec may need to be
updated.

Sincerely,
    James Greene


On Sun, Sep 14, 2014 at 7:54 AM, Dale Harvey <dale@arandomurl.com> wrote:

> websites can already trivially build editors that use copy and paste
> within the site itself, the entire problem is that leads to confusing
> behaviour when the user copies and pastes outside the website, which is a
> huge use case of the clipboard in the first place
>
> On 14 September 2014 08:57, Jonas Sicking <jonas@sicking.cc> wrote:
>
>> On Sat, Sep 13, 2014 at 1:58 PM, Hallvord R. M. Steen
>> <hsteen@mozilla.com> wrote:
>> > * paste: we allow reading clipboard contents if the paste event is not
>> synthetic and not triggered from a document.execCommand('paste') call.
>> There's also an exception that will allow scripts to read the clipboard
>> data in contexts where the UA is configured to allow this (could be for
>> example white-listed, trusted sites or apps).
>>
>> I think we should also allow reading data that was copied from the
>> same origin. That way a website can build an editor which has full
>> copy/paste capabilities as long as you are only editing within that
>> website.
>>
>> / Jonas
>>
>>
>
Received on Monday, 15 September 2014 16:35:27 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:14:26 UTC