Post #4377632

@kepano@mastodon.social @kepano@mastodon.social ok, so there is no security risk from accepting this, it will just create a new note? Or is it here where a webpage could inject code (by having it in the webpage?) and do something bad? I think it’s the simultaneous clipboard issue which is causing a lot of the confusion. It does not ask "Do you want to create a new note with ”? It shows some error about the clipboard. I understand the problem with URI’s not being authenticated, I think it’s wrong allow all "new" commands, it should be per app. If the clipper would generate a private key it could sign the requests and then you approve "Web Clipper" to always do this but other apps would not be able to do it? Thoughts?