On Tue, Feb 18, 2014 at 1:12 PM, Hallvord R. M. Steen
hst...@mozilla.com wrote:
So, the story so far is that the spec has added something it labels
semi-trusted events - that is an event triggered from a trusted event of a
whitelisted type. The precedence here is popup blocking - browsers
So, the story so far is that the spec has added something it labels
semi-trusted events - that is an event triggered from a trusted event of a
whitelisted type. The precedence here is popup blocking - browsers already have
rules for which events are more trusted than others in terms of likely
AFAIK Flash shipped with a more liberal model first, but the abuse problem
was considered significant enough to tighten the model and make it more
restrictive.
That's correct:
- In Flash 9, you could use the
Excellent. Thank you!
Should we be including touch device events, too? e.g. touchend,
pointerup, etc.
Sincerely,
James Greene
On Fri, Sep 13, 2013 at 4:12 AM, Hallvord Steen hst...@mozilla.com wrote:
AFAIK Flash shipped with a more liberal model first, but the abuse
problem
was
Also, will there be any way for us to feature detect when this is available?
I'm thinking that just using `document.queryCommandSupported(copy)` and
`document.queryCommandEnabled(copy)` could return some false positives
(i.e. the feature is not yet implemented but returns `true` anyway) when
the
[Replying to Paul's mail but it's really a response to James - sorry, Paul..]
On 12 juil. 2013, at 21:57, James Greene wrote:
It appears that the only way to trigger a `copy` event programmatically is to
use `document.execCommand('copy')`, which most browsers prevent:
AFAIK Flash shipped with a more liberal model first, but the abuse problem
was considered significant enough to tighten the model and make it more
restrictive.
That's correct:
- In Flash 9, you could use the
James,
I personally think it would be a really good idea. But I am not a browser
implementor.
Overall, I agree with you that writing to the clipboard, only within a click or
key event processing maybe?, is likely to be a non-concern on privacy. I would
love to hear others' feedback.
Is
On Jul 12, 2013, at 12:57 PM, James Greene james.m.gre...@gmail.com wrote:
It appears that the only way to trigger a `copy` event programmatically is to
use `document.execCommand('copy')`, which most browsers prevent:
On Jul 12, 2013, at 12:57 PM, James Greene james.m.gre...@gmail.com wrote:
It appears that the only way to trigger a `copy` event programmatically is
to use `document.execCommand('copy')`, which most browsers prevent:
Paul:
Looking at TimBL's 2010 post, I feel like it's from a slightly era in the
web's lifetime. Looking at this problem again with today's web, I'd rather
see the ability for clipboard injection become a standard available API and
rather create a browser extension to *prevent* it rather than to
Hallvord —
I have also long agreed that clipboard poisoning is rarely that big of an
issue so long as we're not enabling programmatic reading of the clipboard
during a copy event (which I would agree is completely unnecessary). As
you said, since Flash is already an available option to do this
Ryosuke Anne —
Agreed with Anne, leaving it up to the browser vendors an agreed upon
standard (or at least marching direction) means zero progress.
Sincerely,
James Greene
On Wed, Jul 24, 2013 at 7:32 PM, Anne van Kesteren ann...@annevk.nl wrote:
On Jul 12, 2013, at 12:57 PM, James
Oh, and for the record, the analytics company discussed in the Tim BL's
post could've really still manage to do what they were doing without any
copy events at all, it just would've been less accurate.
For example, they could've just as easily added event handlers for
right-click (contextmenu) or
*Correction:*
leaving it up to the browser vendors WITHOUT an agreed upon standard (or at
least marching direction) means zero progress.
Sincerely,
James Greene
On Wed, Jul 24, 2013 at 8:11 PM, James Greene james.m.gre...@gmail.comwrote:
Ryosuke Anne —
Agreed with Anne, leaving it up
It appears that the only way to trigger a `copy` event programmatically is
to use `document.execCommand('copy')`, which most browsers prevent:
http://www.w3.org/TR/clipboard-apis/#integration-with-other-scripts-and-events
What about enabling so enabling semi-restricted programmatic clipboard
16 matches
Mail list logo
