>> a page can wipe out my entire clipboard history if I move my mouse over
>>it.

> Not quite :) Check the list of events - mousemove isn't included:
> http://www.w3.org/TR/html5/browsers.html#allowed-to-show-a-popup

I was just going by where I¹ve seen pages pop up windows, and I¹ve seen
pages that pop up windows just by moving the mouse across them. I can¹t
remember where so can¹t provide examples. However, even if we assume that
was something else (browser bug, user error :-) ), the fact that just
clicking anywhere on a page is enough to allow the page to stuff something
in my clipboard is concerning.

> Keeping in mind that Flash has had similar policies for a while and
>"some site put weird stuff on my clipboard" hasn't been a frequent
>complaint so far (and AFAIK hasn't been needed as defence in court yet),
>I think and hope we're shipping a reasonable and balanced policy here.

Isn¹t Flash limited to a region of the page? That is, the Flash clipboard
copier can¹t catch a click anywhere on the page, just in the region the
Flash script is running in. Or can a page have a transparent Flash that
covers the whole page? I run with FlashBlock so I don¹t know a lot about
all the things Flash can do. And I suppose that¹s the answer here too,
someone will write an extension to block a page from modifying or reading
the clipboard and I¹ll just use that. Although that doesn¹t help on mobile
browsers that don¹t allow extensions.

Brian


Reply via email to