@CuillereNessie@mastodon.social
Post #2822719
2025-03-13 12:38 UTC
@torgo@mastodon.social @yatil@yatil.social
I don't quite get the problem here, so I must be missing something.
If a site wants to access the clipboard, the browser will ask me, yes? Isn't that ok, since it is asking me?
Or is the problem that a site can ask to begin with?
Replies (1)
-
@torgo@mastodon.social 2025-03-13 12:40
@CuillereNessie@mastodon.social @yatil@yatil.social the problem is that this permission can be gamed (eg. https://www.malwarebytes.com/blog/news/2025/03/fake-captcha-websites-hijack-your-clipboard-to-install-information-stealers) and the normative requirements on user agents https://www.w3.org/TR/clipboard-apis/#privacy-async are not strong enough to mitigate these attacks.