Post #2822716

2025-03-13 08:59 UTC

@torgo@mastodon.social So on = the site requests, the browser asks if the site can have the content of the clipboard off = the site requests, the browser denies the request Isn’t the on behavior the same as with camera/microphone?

Replies (2)

@torgo@mastodon.social 2025-03-13 09:39

@yatil@yatil.social yes but it's much more obvious when a site is accessing your camera/microphone because you can see the camera light and OSs show an indication of when your microphone is being used. A site that has clipboard permission could be watching your clipboard at any time the document has focus. It should be noted that the spec includes normative privacy considerations https://www.w3.org/TR/clipboard-apis/#privacy-async. I think some of these MAY statements should be MUSUs. I would probably still turn this feature off.

Open ##2822717
@chebra@mstdn.io 2025-03-13 10:19

@yatil@yatil.social They are just shifting the responsibility. Ctrl+V should be giving the page only that particular current content of the clipboard. Not a blanket permission to read from clipboard anything at any future moment. Like if I want to send a payment, I also don't give them password to my bank account so they can pull the money, because that would be insane, right?

Open ##2822724