Comment #4 on issue 741 by MentalPower: Feature request: Clipboard access
in gears
http://code.google.com/p/gears/issues/detail?id=741
I believe that the security considerations can be addressed by requiring
that the
user be the one to initiate such a transfer.
For instance, it should not be possible for the script to simply say
clipboard.getData() since that would allow arbitrary access to the
clipboard's data.
Rather the script should register for an event that is fired when the user
does a
paste operation, the contents of the clipboard at that point in time are
then passed
in as arguments to the event handler and cannot be accessed any other way.
I don't see any security issues with this approach, though I may be missing
something. As for pasting Javascript, I think that's a non-issue since it
would be
just text.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
