James,

I personally think it would be a really good idea. But I am not a browser 
implementor.

Overall, I agree with you that writing to the clipboard, only within a click or 
key event processing maybe?, is likely to be a non-concern on privacy. I would 
love to hear others' feedback.

Is maybe a first step something such as a browser-extension?
Did you hear brags about users of websites that allowing copy was not a good 
idea?

(I heard a brag close to it by TimBL and J Gruber about the usage of "clipboard 
injection": http://lists.w3.org/Archives/Public/www-tag/2010Jun/0007.html are 
we close to that? I think not but maybe can such a feature get close to it?)

Paul

On 12 juil. 2013, at 21:57, James Greene wrote:

> It appears that the only way to trigger a `copy` event programmatically is to 
> use `document.execCommand('copy')`, which most browsers prevent:
>     
> http://www.w3.org/TR/clipboard-apis/#integration-with-other-scripts-and-events
> 
> What about enabling so enabling semi-restricted programmatic clipboard 
> injection on a page if the user grants their express permission via a 
> once-per-domain security prompt (similar to the Geolocation API)?  IOW, given 
> a user's express permission to the origin and following a user's pointer 
> event or keyboard interaction, I would like to be able to simulate the `copy` 
> event (and the `beforecopy` event, if practical).
> 
> I'm not quite sure how far this will go as "clipboard poisoning" is always a 
> real concern.  In fact, I understand that better than most, since my desire 
> to get such an adaptation to the Clipboard API spec is the direct result of 
> my work as the co-maintainer of the popular ZeroClipboard library (used by 
> GitHub, bit.ly, and many other sites).  Jon and I would like nothing better 
> than to eliminate ZeroClipboard's dependency on Flash but that is 
> unattainable given the current restrictions of this spec.
> 
> If Flash doesn't live on for anything else, it may well live on longer than 
> it should for its unmatched ability to do programmatic clipboard injection 
> after a user's click or keypress.  :(
> 
> Thoughts?
> 
> 
> Sincerely,
>     James Greene
>     http://jamesgreene.net/

Reply via email to