This would be really nice.
After a very quick read-through, here are three first reactions:

- this seems to support the insertion in the clipboard's data of other types 
than what is currently commonly supported by browsers and the minimum quoted 
there; this is good and important. I think, for example, that such data as the 
iCal format would fit very well and be very useful here. Probably RDF/XML and 
PDF would be safe as well. I don't know how a format could enter the arena of 
"safe" (or "sanitized") formats... maybe that should be included in media-types 
registration...

- there is a sanitization process for HTML whose basis is described. Verrrry 
useful. I can't unfortunately answer if it prevents against attacks, it seems 
so. Allow me to request, however, that you include consideration for all 
children of HTML5, i.e. also MathML and SVG within the process.

- the sanitization process seems to forget the embedded images that need to 
be... "embedded" within the clipboard (as data: attribute-values maybe?). This 
is the biggest risk of transferring any HTML or XML based formats, to my taste, 
after the script elements, and it includes also the "call" to any "related 
material" (DTDs, imported OWL ontologies, CSS stylesheets, ...).


Le 23 déc. 2010 à 16:35, Hallvord R. M. Steen a écrit :
> looking at what Opera needs to support I drafted a specish text for clipboard 
> events. Something for this WG?
> 
> -- 
> Hallvord R. M. Steen, Core Tester, Opera Software
> http://www.opera.com http://my.opera.com/hallvors/<cbapispec.html>

Could I also request that Opera considers the chapter 6 of MathML which 
specifies a pure-markup-based method to indicate alternate clipboard formats?

thanks in advance

paul

Reply via email to